On Mon, Sep 16, 2019 at 08:08:01PM +0200, Lennart Poettering wrote: > I mean, as I understand you are unhappy with behaviour you saw on > systemd systems; we can certainly improve behaviour of systemd in > userspace alone, i.e. abort the getrandom() after a while in userspace > and log about it using typical userspace logging to the console. I am > not sure why you want to do all that in the kernel, the kernel isn't > great at user interaction, and really shouldn't be. Because the syscall will have the option to return what random data was available in this case, while if you try to fix it only from within systemd you currently don't even get that data. > It appears to me you subscribe too much to an idea that userspace > people are not smart enough and couldn't implement something like > this. Turns out we can though, and there's no need to add logic that > appears to follow the logic of "never trust userspace"... I personally see this very differently. If randoms were placed into a kernel compared to other operating systems doing everything in userspace, it's in part because it requires to collect data very widely to gather some entropy and that no isolated userspace alone can collect as much as the kernel. Or they each have to reimplement their own method, each with their own bugs, instead of fixing them all at a single place. All applications need random, there's no reason for having to force them all to implement them in detail. Willy
