NetBSD-Users archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: Of /var/db/entropy-file and booting kernels



> On May 6, 2020, at 6:10 PM, Chavdar Ivanov <ci4ic4%gmail.com@localhost> wrote:
> 
> You don't boot KASLR this way.
> 
> You put
> 
> menu=Boot KASLR:rndseed /var/db/entropy-file;pkboot netbsd_kaslr
> 
> in your boot.cfg and copy /usr/mdec/prekern to / .
> 
> (I copy the KASLR kernel to /netbsd_kaslr).

Ah ha!

For those who read this thread later, consider looking at this:

https://wiki.netbsd.org/security/kaslr/

I’ll still have to make mods to my setup to deal with the entropy-file, but PR #48702 points the way.

Thanks to all who showed the way...


Home | Main Index | Thread Index | Old Index