rpms/rng-tools
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Disable jitter entropy source by default

Browse Source 
Almost all modern CPUs have a hardware randomness source in some form.
Most of virtual machines have /dev/hwrng provided by a virtual host.
The jitter entropy source is just eating CPU cycles in such cases, so
disable it by default. It can be enabled explicitly for the older
hardware without hardware entropy (like the Athlon FX CPU).

Resolves: RHEL-91119

Signed-off-by: Vladis Dronov <vdronov@redhat.com>
This commit is contained in:
Vladis Dronov 2025-06-19 22:45:34 +02:00
parent b7c302a483
commit c2edd1ce9c
2 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
rng-tools.spec
View File

@ -12,7 +12,7 @@
Summary: Random number generator related utilities
Name: rng-tools
Version: 6.17
Release: 1%{?dist}
Release: 2%{?dist}
License: GPL-2.0-or-later
URL: https://github.com/nhorman/rng-tools
Source0: %{url}/archive/v%{version}/%{name}-%{version}.tar.gz
@ -104,6 +104,9 @@ install -D %{SOURCE2} -m0644 %{buildroot}%{_sysconfdir}/sysconfig/rngd
%config(noreplace) %attr(0644,root,root) %{_sysconfdir}/sysconfig/rngd
%changelog
* Thu Jun 26 2025 Vladis Dronov <vdronov@redhat.com> - 6.17-2
- Disable jitter entropy source by default (RHEL-91119)
* Fri Oct 25 2024 Vladis Dronov <vdronov@redhat.com> - 6.17-1
- Add Intel CET IBT instrumentation to assembly code
- Update to the upstream v6.17 @ ac43f912 (RHEL-64951)

2
rngd.sysconfig
View File

@ -1,3 +1,3 @@
# Optional arguments passed to rngd. See rngd(8) and
# https://bugzilla.redhat.com/show_bug.cgi?id=1252175#c21
RNGD_ARGS="--fill-watermark=0 -x pkcs11 -x nist -x qrypt -x namedpipe -D daemon:daemon"
RNGD_ARGS="--fill-watermark=0 -x pkcs11 -x nist -x qrypt -x namedpipe -x jitter -D daemon:daemon"