[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Qemu-devel] RFC: virtio-rng and /dev/urandom
From: |
Eric Blake |
Subject: |
Re: [Qemu-devel] RFC: virtio-rng and /dev/urandom |
Date: |
Fri, 15 Apr 2016 09:47:51 -0600 |
User-agent: |
Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.7.1 |
On 04/15/2016 04:41 AM, Cole Robinson wrote:
> Libvirt currently rejects using host /dev/urandom as an input source for a
> virtio-rng device. The only accepted sources are /dev/random and /dev/hwrng.
> This is the result of discussions on qemu-devel around when the feature was
> first added (2013). Examples:
>
> http://lists.gnu.org/archive/html/qemu-devel/2012-09/msg02387.html
> https://lists.gnu.org/archive/html/qemu-devel/2013-03/threads.html#00023
>
> libvirt's rejection of /dev/urandom has generated some complaints from users:
>
> https://bugzilla.redhat.com/show_bug.cgi?id=1074464
> * cited: http://www.2uo.de/myths-about-urandom/
> http://www.redhat.com/archives/libvir-list/2016-March/msg01062.html
> http://www.redhat.com/archives/libvir-list/2016-April/msg00186.html
>
> I think it's worth having another discussion about this, at least with a
> recent argument in one place so we can put it to bed. I'm CCing a bunch of
> people. I think the questions are:
>
> 1) is the original recommendation to never use virtio-rng+/dev/urandom
> correct?
That I'm not sure about - and the answer may be context-dependent (for
example a FIPS user may care more than an ordinary user)
>
> 2) regardless of #1, should we continue to reject that config in libvirt?
This one, I have a pretty strong opinion: libvirt should NOT enforce
policy. If someone has a valid use case for doing it, we should permit
them to do it, even if it lets someone else shoot themselves in the
foot. So I think we should relax libvirt to allow users that source
their virtio-rng from /dev/urandom.
--
Eric Blake eblake redhat com +1-919-301-3266
Libvirt virtualization library http://libvirt.org
signature.asc
Description: OpenPGP digital signature
- [Qemu-devel] RFC: virtio-rng and /dev/urandom, Cole Robinson, 2016/04/15
- Re: [Qemu-devel] RFC: virtio-rng and /dev/urandom, Richard W.M. Jones, 2016/04/15
- Re: [Qemu-devel] RFC: virtio-rng and /dev/urandom,
Eric Blake <=
- Re: [Qemu-devel] RFC: virtio-rng and /dev/urandom, Hubert Kario, 2016/04/15
- Re: [Qemu-devel] RFC: virtio-rng and /dev/urandom, H. Peter Anvin, 2016/04/15
- Re: [Qemu-devel] RFC: virtio-rng and /dev/urandom, H. Peter Anvin, 2016/04/15
- Re: [Qemu-devel] RFC: virtio-rng and /dev/urandom, Paolo Bonzini, 2016/04/16
- Re: [Qemu-devel] RFC: virtio-rng and /dev/urandom, H. Peter Anvin, 2016/04/17
- Re: [Qemu-devel] RFC: virtio-rng and /dev/urandom, H. Peter Anvin, 2016/04/17
- Re: [Qemu-devel] RFC: virtio-rng and /dev/urandom, Hubert Kario, 2016/04/18
- Re: [Qemu-devel] RFC: virtio-rng and /dev/urandom, Hubert Kario, 2016/04/18
Re: [Qemu-devel] [libvirt] RFC: virtio-rng and /dev/urandom, Yaniv Kaul, 2016/04/19
Re: [Qemu-devel] RFC: virtio-rng and /dev/urandom, H. Peter Anvin, 2016/04/15