CVS commit: src

["Thor Lancelot Simon" <tls%netbsd.org@localhost>]

Module Name:    src
Committed By:   tls
Date:           Mon Nov 28 07:56:54 UTC 2011

Modified Files:
        src/share/man/man5: boot.cfg.5
        src/sys/arch/i386/stand/boot: boot2.c
        src/sys/arch/i386/stand/lib: bootmod.h exec.c libi386.h
        src/sys/arch/x86/include: bootinfo.h
        src/sys/arch/x86/x86: x86_machdep.c
        src/sys/dev: rnd.c

Log Message:
Add support for passing saved entropy (random seed file) to the kernel
from the bootloader.  This can fix the problem of poor quality keys
for other kernel modules which call arc4random() early in kernel startup
(NFS startup, in particular, causes this).

We continue to rely on the etc/rc.d/random_seed script to save entropy
to the seed file at shutdown and erase the seed file at startup.

Boot loader support implemented only for i386 and amd64 ports for now but
it should be easy for other ports to do the same or similar.


To generate a diff of this commit:
cvs rdiff -u -r1.22 -r1.23 src/share/man/man5/boot.cfg.5
cvs rdiff -u -r1.55 -r1.56 src/sys/arch/i386/stand/boot/boot2.c
cvs rdiff -u -r1.4 -r1.5 src/sys/arch/i386/stand/lib/bootmod.h
cvs rdiff -u -r1.48 -r1.49 src/sys/arch/i386/stand/lib/exec.c
cvs rdiff -u -r1.37 -r1.38 src/sys/arch/i386/stand/lib/libi386.h
cvs rdiff -u -r1.18 -r1.19 src/sys/arch/x86/include/bootinfo.h
cvs rdiff -u -r1.56 -r1.57 src/sys/arch/x86/x86/x86_machdep.c
cvs rdiff -u -r1.86 -r1.87 src/sys/dev/rnd.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.