[Solved] Problem during trunk installation

[raphael]

Quote:The different cat X > /dev/random somehow didn't work for me

what about piping the output to /dev/urandom? (but still not modifying the read from /dev/random in ispcp_common_methods).

Quote:I'm not sure but I think urandom also uses the kernel entropy, but if it runs out it falls back to another mechanism.

It does, and that's exactly the vulnerable point: if you first empty (or at least reduce) the entropy pool, further reads from /dev/urandom will use a more predictable algorithm and thus lower the security level.

Quote:and during the installation it's - afaik - only used for the pma blowfish secret

gen_sys_rand_num is used at two steps: make and ispcp-setup.
keys/rpl.pl generate the pair keys used for encrypting the database password.
ispcp-setup: calls it to generate pma's blowfish key