Commit 661464b193899bdd93dae2cf701e8da014f3991d

Authored by Georg Hopp
1 parent 94b84a20

as multi line emphasize does not work make it a cite

Showing 1 changed file with 18 additions and 18 deletions
... ... @@ -47,24 +47,24 @@ This should prevent right drop while changing the effective user id.
47 47 If apache2 does not start it most likely is related to some access rights.
48 48 Just have a look in the error log as mentioned in this.
49 49
50   -**ATTENTION: This module adds data to the kernel random number pool. To do
51   -this the apache process needs CAP_SYS_ADMIN. Without any role based access
52   -control this is true only for the root user.
53   -
54   -An alternative is to assign CAP_SYS_ADMIN to the apache process. This still
55   -seems not to be the ideal solution as this would give the apache process
56   -access to several system internals like de-/activation of swap devices
57   -mount/unmount, etc. Anyway, this is the best i could figure out.
58   -
59   -It would be a good to have a special capabilty just for random pool
60   -administration but actually i have no clue if and how this might be possible.
61   -Anyway this still might lead to problems with the security of your encryption
62   -as an attacker might be able to add own random values to the random pool which
63   -in turn might compromize your encryption.
64   -
65   -Actually i have no good solution for this...maybe it is not a good idea at all
66   -to generate random numbers this way, i would be lucky to get feedback on this
67   -issue.**
  50 +> ATTENTION: This module adds data to the kernel random number pool. To do
  51 +> this the apache process needs CAP_SYS_ADMIN. Without any role based access
  52 +> control this is true only for the root user.
  53 +>
  54 +> An alternative is to assign CAP_SYS_ADMIN to the apache process. This still
  55 +> seems not to be the ideal solution as this would give the apache process
  56 +> access to several system internals like de-/activation of swap devices
  57 +> mount/unmount, etc. Anyway, this is the best i could figure out.
  58 +>
  59 +> It would be a good to have a special capabilty just for random pool
  60 +> administration but actually i have no clue if and how this might be possible.
  61 +> Anyway this still might lead to problems with the security of your encryption
  62 +> as an attacker might be able to add own random values to the random pool which
  63 +> in turn might compromize your encryption.
  64 +>
  65 +> Actually i have no good solution for this...maybe it is not a good idea at all
  66 +> to generate random numbers this way, i would be lucky to get feedback on this
  67 +> issue.
68 68
69 69 ## Dependencies
70 70
... ...
Please register or login to post a comment