Re: [kernel-hardening] Re: [PATCH v4 06/13] iscsi: ensure RNG is seeded before use
From: Stephan Müller
Date: Sun Jun 18 2017 - 04:05:29 EST
Am Samstag, 17. Juni 2017, 05:45:57 CEST schrieb Lee Duncan:
Hi Lee,
> In your testing, how long might a process have to wait? Are we talking
> seconds? Longer? What about timeouts?
>
In current kernels (starting with 4.8) this timeout should clear within a few
seconds after boot.
In older kernels (pre 4.8), my KVM takes up to 90 seconds to reach that
seeding point. I have heard that on IBM System Z this trigger point requires
minutes to be reached.
Ciao
Stephan