From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <klark.devel@gmail.com>
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on
 sa.local.altlinux.org
X-Spam-Level: 
X-Spam-Status: No, score=-2.0 required=5.0 tests=BAYES_00,DKIM_SIGNED,
 DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FROM autolearn=ham autolearn_force=no
 version=3.4.1
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;
 h=subject:references:from:to:message-id:date:user-agent:mime-version
 :in-reply-to:content-transfer-encoding:content-language;
 bh=uun17FhDJUwmkmZ+zanvuQOPF6W7/BEeEZ+71ajLZ0E=;
 b=I5yykca8qiNphZelgwoSX/rJqiYASs27ieARV8nmgXgVdKGxRkw3I8SooyUVoCzaY9
 6BrUpK/R6JhzpMSXk7AN+OpnnPNDvXNnOJETc911Qf962M6FJ/CPTFt2ZKy5ccXfkEsd
 0XmayhoHMbJ/knYaawhis7zmowiKzCM4zNWIOII2XT4YaWYhWZ9bXyPjlluWySbeT3T7
 vc9TskiQ5yLhBUYZyMcnDmi4d+z1nILS/tIycWfrtLpQ6DOwEf3RRbFUYE8dorwomI1o
 1sMb4wKb5QpzYli6pc+WNJYLutAolA95vRSXU+5QIWUxMgdAlsyUuHnjAnzPHNpjcaQO
 1TkQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20161025;
 h=x-gm-message-state:subject:references:from:to:message-id:date
 :user-agent:mime-version:in-reply-to:content-transfer-encoding
 :content-language;
 bh=uun17FhDJUwmkmZ+zanvuQOPF6W7/BEeEZ+71ajLZ0E=;
 b=huOvHFGMgZR50LBwH35kVTAtK8TXds6C8bFWbxiL5GMKNAKj49m6A2ONWpkS6cMbOu
 TgKIFjZLQ7Qf2dPiLCI6k5C5/Wtz2Liq7TayacC0dPcAI0Kt4TTALzVEcS8oMsC+qevo
 mBxNGq2GUVX1cohgKaeCETk3OtmtQDSL/HlPWsmyu2panBH75tvJJRx+v08c7exLCD15
 WlIn/4AROXAc8aprZNQygj8mL7bA4GBw/2WwMTcs3O5+7Tn5F4ym2/D+iP8csXm6xCDX
 1hy1eF5fKVdLpZrRTPL+0jbFsxQRFFbq+1AUHuA7LV0GBASrRvnCnERF3zywIJTvim6y
 qaPg==
X-Gm-Message-State: AGRZ1gJ2KJRgFbU1w+/GqSoX+pIXk7DNPoBsBdFDldtuJ0B0SthQKcGx
 5Aoy95mTo9foe4gn2fT2hXnVxxuP
X-Google-Smtp-Source: AJdET5d0RsUdA7mghtZ8dDPKFq6xiCypAwCNhRTP0Ti72gS/gYy3aL6os5t1iOwBL9sIodnOex2GDw==
X-Received: by 2002:a19:1f46:: with SMTP id f67mr9908421lff.1.1541330249221;
 Sun, 04 Nov 2018 03:17:29 -0800 (PST)
References: <CAK1jUOs=O4hnD6p=eQV6--XyKDiZai=JJ8vM33YXA4JdSY7x=A@mail.gmail.com>
 <82b4938f-a23b-b51e-939d-9f74fa8703a2@altlinux.org>
 <4b5ab176-44ba-db98-e08b-b76146753494@gmail.com>
 <2612299.mELcP0gfiM@homerun.localdomain>
 <f73d7540-6695-670e-5772-352a7fe0c51a@gmail.com>
From: Leonid Krivoshein <klark.devel@gmail.com>
To: ALT Linux Team development discussions <devel@lists.altlinux.org>
Message-ID: <b56dff0f-d4c5-fddd-1123-28c5e1d5cacf@gmail.com>
Date: Sun, 4 Nov 2018 14:17:12 +0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101
 Thunderbird/52.8.0
MIME-Version: 1.0
In-Reply-To: <f73d7540-6695-670e-5772-352a7fe0c51a@gmail.com>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
Content-Language: ru
Subject: Re: [devel] =?utf-8?b?W3Npc3lwaHVzXSDQndC1INC/0LXRgNC10LrQu9GO0Yc=?=
 =?utf-8?b?0LDQtdGC0YHRjyDQsiDQs9GA0LDRhNC40YfQtdGB0LrQuNC5INGA0LXQttC4?=
 =?utf-8?b?0Lw=?=
X-BeenThere: devel@lists.altlinux.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: ALT Linux Team development discussions <devel@lists.altlinux.org>
List-Id: ALT Linux Team development discussions <devel.lists.altlinux.org>
List-Unsubscribe: <https://lists.altlinux.org/mailman/options/devel>,
 <mailto:devel-request@lists.altlinux.org?subject=unsubscribe>
List-Archive: <http://lists.altlinux.org/pipermail/devel>
List-Post: <mailto:devel@lists.altlinux.org>
List-Help: <mailto:devel-request@lists.altlinux.org?subject=help>
List-Subscribe: <https://lists.altlinux.org/mailman/listinfo/devel>,
 <mailto:devel-request@lists.altlinux.org?subject=subscribe>
X-List-Received-Date: Sun, 04 Nov 2018 11:17:31 -0000
Archived-At: <http://lore.altlinux.org/devel/b56dff0f-d4c5-fddd-1123-28c5e1d5cacf@gmail.com/>
List-Archive: <http://lore.altlinux.org/devel/>
List-Post: <mailto:devel@altlinux.org>

03.11.2018 14:43, Leonid Krivoshein пишет:
> Исходя из этого нужно:
>
> 1) определить значение длины минимально необходимой энтропии;
> 2) сделать тест длины энтропии и добавить его в systemd-unit для haveged;
> 3) включить haveged во все дистрибутивы.

Наверное, достаточно включить haveged -- у него самого есть порог (512 
бит энтропии по умолчанию, если меньше, то он включается, число меняется 
в настройках). А вот останавливать haveged после старта сессии или нет 
-- можно оставить на усмотрение пользователя.


-- 
Best regards,
Leonid Krivoshein.