From b90855b2fefe0c28c81502dd820d9d3e285a157d Mon Sep 17 00:00:00 2001
From: Colin Percival <cperciva@FreeBSD.org>
Date: Mon, 24 Nov 2008 17:39:39 +0000
Subject: Make sure arc4random(9) is properly seeded when /etc/rc.d/initrandom
 returns.

Approved by:	so (cperciva)
Approved by:	re (kensmith)
Security:	FreeBSD-SA-08:11.arc4random
---
 sys/dev/random/randomdev.c | 1 +
 1 file changed, 1 insertion(+)

(limited to 'sys/dev/random/randomdev.c')

diff --git a/sys/dev/random/randomdev.c b/sys/dev/random/randomdev.c
index 7cc78e61e8c2..99c4ea6260de 100644
--- a/sys/dev/random/randomdev.c
+++ b/sys/dev/random/randomdev.c
@@ -90,6 +90,7 @@ random_close(struct cdev *dev __unused, int flags, int fmt __unused,
 	    && (securelevel_gt(td->td_ucred, 0) == 0)) {
 		(*random_systat.reseed)();
 		random_systat.seeded = 1;
+		arc4rand(NULL, 0, 1);	/* Reseed arc4random as well. */
 	}
 
 	return (0);
-- 
cgit v1.3