From 1b73b4962708a414496f189053f6042b24bba71e Mon Sep 17 00:00:00 2001 From: delphij Date: Tue, 29 Jul 2014 06:00:16 +0000 Subject: [PATCH] MFC r268979: Don't save entropy inside jails. As of r126744, we no longer feed the entropy device in jails upon start, and collecting them is no longer useful. PR: conf/126744 Submitted by: Eugene Grosbein (with minor changes) Approved by: so (des) git-svn-id: svn://svn.freebsd.org/base/stable/10@269220 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f --- libexec/save-entropy/save-entropy.sh | 2 ++ 1 file changed, 2 insertions(+) diff --git a/libexec/save-entropy/save-entropy.sh b/libexec/save-entropy/save-entropy.sh index e96b543a7..880a98840 100755 --- a/libexec/save-entropy/save-entropy.sh +++ b/libexec/save-entropy/save-entropy.sh @@ -42,6 +42,8 @@ elif [ -r /etc/rc.conf ]; then . /etc/rc.conf 2>/dev/null fi +[ $(/sbin/sysctl -n security.jail.jailed) = 0 ] || exit 0 + case ${entropy_dir} in [Nn][Oo]) exit 0 -- 2.42.0