Re: gpg /netstat problems
From: Richard Cross (richard.cross@freeserve.com)Date: 05/08/02
- Previous message: Matt Collins: "Re: Locking down a network connection to a single machine."
- In reply to: Darren Moffat: "Re: gpg /netstat problems"
- Next in thread: Jameel Akari: "Re: gpg /netstat problems"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: Richard Cross <richard.cross@freeserve.com> To: Darren Moffat <Darren.Moffat@Sun.COM> Date: 08 May 2002 08:54:58 +0100
Thanks for your help guys!
On Tue, 2002-05-07 at 18:07, Darren Moffat wrote:
>
> >I noticed GnuPG wasn't working properly recently - it was hanging while
> >trying to encrypt a file or when generating a new key. Ran truss on it
> >and found that it forks a separate process which turned out to be:
> >
> >netstat -p -f inet
> >
> >and it was hanging because it couldn't resolve the addresses, however
> >that aside...
> >
> >... anyone know why it needs to do this and whether or not this can be
> >disabled? Could it potentially be a security risk? (FYI it was the
> >packaged version for Solaris 8 from Sunfreeware).
>
> Without looking at the code I'm going to take a wild guess and say
> that it is running a collection of external commands to generate randomness,
> in the same way that OpenSSH can do if you don't have an OS provided
> entropy source.
>
> If this is the case you probably want to get the source and recompile it to
> use /dev/random after installing:
>
> Patch-ID# 112438-01
> Keywords: secuity random number generator PRNG
> Synopsis: SunOS 5.8: /kernel/drv/random patch
> Date: Mar/28/2002
> Solaris Release: 8
>
>
>
> --
> Darren J Moffat
>
>
-- Richard Cross Unix Support Engineer Freeserve.com PLC Tel: 0113 297 6531 Fax: 0113 297 6500Freeserve AnyTime, all the Internet you want for only £13.99 per month with one month¢s FREE trial!
Be free to do whatever you want. Be Freeserve. Sign-up at www.freeserve.com/anytime
- Previous message: Matt Collins: "Re: Locking down a network connection to a single machine."
- In reply to: Darren Moffat: "Re: gpg /netstat problems"
- Next in thread: Jameel Akari: "Re: gpg /netstat problems"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]