>Hi Robert, > >Noticed the following commit: > >> CVSROOT: /cvs >> Module name: ports >> Changes by: rob...@cvs.openbsd.org 2016/01/02 06:57:12 >> >> Modified files: >> mail/zarafa/zarafa: Makefile >> mail/zarafa/zarafa/patches: patch-common_platform_linux_cpp >> patch-configure_ac >> >> Log message: >> use getentropy(2) instead of directly opening /dev/urandom; >> this unbreaks zarafa-webapp running with chroot'd php > >This really looks like a case where you should be calling >arc4random_buf(3) instead of getentropy(2). In fact calling >getentropy(2) is almost always the wrong approach.
I agree. getentropy is the low-level interface. Call the high level interface.