>Hi Robert,
>
>Noticed the following commit:
>
>> CVSROOT:        /cvs
>> Module name:    ports
>> Changes by:     rob...@cvs.openbsd.org  2016/01/02 06:57:12
>> 
>> Modified files:
>>         mail/zarafa/zarafa: Makefile 
>>         mail/zarafa/zarafa/patches: patch-common_platform_linux_cpp 
>>                                     patch-configure_ac 
>> 
>> Log message:
>> use getentropy(2) instead of directly opening /dev/urandom;
>> this unbreaks zarafa-webapp running with chroot'd php
>
>This really looks like a case where you should be calling
>arc4random_buf(3) instead of getentropy(2).  In fact calling
>getentropy(2) is almost always the wrong approach.

I agree.  getentropy is the low-level interface.  Call the high level
interface.

Reply via email to