libvirt/src/security
Eric Blake 87de27b7f9 virrandom: make virRandomInitialize an automatic one-shot
All callers used the same initialization seed (well, the new
viratomictest forgot to look at getpid()); so we might as well
make this value automatic.  And while it may feel like we are
giving up functionality, I documented how to get it back in the
unlikely case that you actually need to debug with a fixed
pseudo-random sequence.  I left that crippled by default, so
that a stray environment variable doesn't cause a lack of
randomness to become a security issue.

* src/util/virrandom.c (virRandomInitialize): Rename...
(virRandomOnceInit): ...and make static, with one-shot call.
Document how to do fixed-seed debugging.
* src/util/virrandom.h (virRandomInitialize): Drop prototype.
* src/libvirt_private.syms (virrandom.h): Don't export it.
* src/libvirt.c (virInitialize): Adjust caller.
* src/lxc/lxc_controller.c (main): Likewise.
* src/security/virt-aa-helper.c (main): Likewise.
* src/util/iohelper.c (main): Likewise.
* tests/seclabeltest.c (main): Likewise.
* tests/testutils.c (virtTestMain): Likewise.
* tests/viratomictest.c (mymain): Likewise.
2012-08-06 08:15:13 -06:00
..
security_apparmor.c Desert the FSF address in copyright 2012-07-23 10:50:50 +08:00
security_apparmor.h Desert the FSF address in copyright 2012-07-23 10:50:50 +08:00
security_dac.c Desert the FSF address in copyright 2012-07-23 10:50:50 +08:00
security_dac.h Desert the FSF address in copyright 2012-07-23 10:50:50 +08:00
security_driver.c Desert the FSF address in copyright 2012-07-23 10:50:50 +08:00
security_driver.h Desert the FSF address in copyright 2012-07-23 10:50:50 +08:00
security_manager.c security: Skip labeling resources when seclabel defaults to none 2012-07-27 18:58:48 +02:00
security_manager.h Desert the FSF address in copyright 2012-07-23 10:50:50 +08:00
security_nop.c Desert the FSF address in copyright 2012-07-23 10:50:50 +08:00
security_nop.h Desert the FSF address in copyright 2012-07-23 10:50:50 +08:00
security_selinux.c Desert the FSF address in copyright 2012-07-23 10:50:50 +08:00
security_selinux.h Desert the FSF address in copyright 2012-07-23 10:50:50 +08:00
security_stack.c Desert the FSF address in copyright 2012-07-23 10:50:50 +08:00
security_stack.h Desert the FSF address in copyright 2012-07-23 10:50:50 +08:00
virt-aa-helper.c virrandom: make virRandomInitialize an automatic one-shot 2012-08-06 08:15:13 -06:00