From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-2.1 required=3.0 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM, HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS, URIBL_BLOCKED,USER_AGENT_SANE_1 autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 47586C49ED7 for ; Mon, 16 Sep 2019 23:29:34 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id 10E192067D for ; Mon, 16 Sep 2019 23:29:33 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="sOnrCysg" Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1729756AbfIPX3d (ORCPT ); Mon, 16 Sep 2019 19:29:33 -0400 Received: from mail-wr1-f65.google.com ([209.85.221.65]:38415 "EHLO mail-wr1-f65.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1725917AbfIPX3c (ORCPT ); Mon, 16 Sep 2019 19:29:32 -0400 Received: by mail-wr1-f65.google.com with SMTP id l11so1139159wrx.5; Mon, 16 Sep 2019 16:29:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to:user-agent; bh=iSJV746RJhhQqjkMYfS7cXLz5TDKUWbV61EOzvKoZE8=; b=sOnrCysgB8VpJ/0LmxZjUQaJw6293vaRqOVGY7iS9Cv094eZlzG1ZltkyhgHGXFpdr 5gjvtVHKucXlUlGU6uJOAN0f9W/ohCedq6jOQ1cPuXzdjtnXrGq34cgOOzp//emRFqvL eR4ssAYDx0jRGQZBphzPZcodGYS9OJnLMDO/d3HFYzhjQsb19BDY5Ndq1gGoDXDrjjRg 47qMYNwRzx3X7vssqRebmiWmUHYaxdx8QB2h/kspujtbXAe/5VdyZ6Ce23tLymJqPo5w HNdS5TpT42UOPIN7sIn31dGr2tWYF4Noa8UwBpmQAx4EcThMrhI6JiyxyOMzGheQKC51 +cdA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=iSJV746RJhhQqjkMYfS7cXLz5TDKUWbV61EOzvKoZE8=; b=i8IV61L3VD4UMOGLIa2nhAcq2/0bXNr2NS2GjxzUot7GK0V9mlwo1G4pDhGfgwjCee 3N32RFc5/jbnYQO6VxvlZMdCiUrwaTRGEbJvmo7erBuNrzaIP92agdZgNIsz6sfUPkPC /1bPpvTb5ZnVzQCQlIcPYiqJwX51cRnmg5jsG/Mnb/x8jqhMwmqxr+aHasTcbqD6GN+Y 1I26RGIKOvhkzzINv4jOJo5o5ZKP2hGyWWmyNx0h7TsPznwb5+HUwYFnmw4qTKwVa3Uu aSYZKbsCaC3FTk671gQAS0wRvvenLaYu1CKpa52C6QjDqHE9tHqKUzMFSeLdstxT0DJP DgMw== X-Gm-Message-State: APjAAAXb7LmE2I8zNaLEwOuVlYuu8js+BZ+1nU8eF8et7f18KDXC3tfB dbsezrPyad17TMJcAdnG5yE= X-Google-Smtp-Source: APXvYqyxDwVFzcE3x/4xdXPW2m8KVSDpMzJvReZW6zi2IZkcFBIXoMH+4N1RbVOHMezJ68DhsuBA6Q== X-Received: by 2002:adf:f112:: with SMTP id r18mr632122wro.88.1568676571199; Mon, 16 Sep 2019 16:29:31 -0700 (PDT) Received: from darwi-home-pc (ip-109-42-3-39.web.vodafone.de. [109.42.3.39]) by smtp.gmail.com with ESMTPSA id f3sm317963wrq.53.2019.09.16.16.29.28 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 16 Sep 2019 16:29:30 -0700 (PDT) Date: Tue, 17 Sep 2019 01:29:22 +0200 From: "Ahmed S. Darwish" To: Linus Torvalds Cc: Matthew Garrett , "Theodore Y. Ts'o" , Willy Tarreau , Vito Caputo , Lennart Poettering , Andreas Dilger , Jan Kara , Ray Strode , William Jon McCann , "Alexander E. Patrakov" , zhangjs , linux-ext4@vger.kernel.org, lkml Subject: Re: Linux 5.3-rc8 Message-ID: <20190916232922.GA7880@darwi-home-pc> References: <20190916042952.GB23719@1wt.eu> <20190916061252.GA24002@1wt.eu> <20190916172117.GB15263@mit.edu> <20190916230217.vmgvsm6o2o4uq5j7@srcf.ucam.org> <20190916231103.bic65ab4ifv7vhio@srcf.ucam.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.12.1 (2019-06-15) Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Mon, Sep 16, 2019 at 04:18:00PM -0700, Linus Torvalds wrote: > On Mon, Sep 16, 2019 at 4:11 PM Matthew Garrett wrote: > > > > In one case we have "Systems don't boot, but you can downgrade your > > kernel" and in the other case we have "Your cryptographic keys are weak > > and you have no way of knowing unless you read dmesg", and I think > > causing boot problems is the better outcome here. > > Or: In one case you have a real and present problem. In the other > case, people are talking hypotheticals. > Linus, in all honesty, the other case is _not_ a hypothetical . For example, here is a fresh comment on LWN from gnupg developers: https://lwn.net/Articles/799352 It's about this libgnupg code: => https://dev.gnupg.org/source/libgcrypt.git => random/rdlinux.c: /* If we have a modern operating system, we first try to use the new * getentropy function. That call guarantees that the kernel's * RNG has been properly seeded before returning any data. This * is different from /dev/urandom which may, due to its * non-blocking semantics, return data even if the kernel has * not been properly seeded. And it differs from /dev/random by never * blocking once the kernel is seeded. */ #if defined(HAVE_GETENTROPY) || defined(__NR_getrandom) do { ... ret = getentropy (buffer, nbytes); ... } while (ret == -1 && errno == EINTR); thanks, -- Ahmed Darwish http://darwish.chasingpointers.com