Re: [kernel-hardening] Re: [PATCH v4 06/13] iscsi: ensure RNG is seeded before use

From: Stephan Müller
Date: Sun Jun 18 2017 - 04:05:29 EST


Am Samstag, 17. Juni 2017, 05:45:57 CEST schrieb Lee Duncan:

Hi Lee,

> In your testing, how long might a process have to wait? Are we talking
> seconds? Longer? What about timeouts?
>

In current kernels (starting with 4.8) this timeout should clear within a few
seconds after boot.

In older kernels (pre 4.8), my KVM takes up to 90 seconds to reach that
seeding point. I have heard that on IBM System Z this trigger point requires
minutes to be reached.

Ciao
Stephan