Re: kernel security questions

Jon Lewis (jlewis@inorganic5.fdt.net)
Mon, 16 Mar 1998 02:08:21 -0500 (EST)


On Mon, 16 Mar 1998, Dave Wreski wrote:

> I should have mentioned that -- I realize its mostly garbage. I wrote a C
> program that use isalpha() to determine its validity. So it reads three or
> four chars, and picks a punctuation mark to prevent alphabetic passwords only.
>
> I just didn't realize how random it actually is, and if its really meant for
> this purpose... And how about /dev/urandom?

urandom is the faster less secure random generator. Looking at a few dd's
from it, I would think it would work as well for this purpose. Instead of
using isalpha and friends, just make sure the char value is between 32 and
126. That'll give you a better range of usable but non-alpha characters.

------------------------------------------------------------------
Jon Lewis <jlewis@fdt.net> | Unsolicited commercial e-mail will
Network Administrator | be proof-read for $199/message.
Florida Digital Turnpike |
______http://inorganic5.fdt.net/~jlewis/pgp for PGP public key____

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu