[PATCH] tcp-wrappers support extended to x11 forwards

Kevin Steves stevesk at pobox.com
Mon Dec 3 09:59:37 EST 2001


On Sun, 2 Dec 2001, Carson Gaspar wrote:
:--On Friday, November 30, 2001 12:09 PM -0800 Kevin Steves
:> if it's MIT-MAGIC-COOKIE-1, it's 128 bits.
:
:Generated from what entropy source? I've never seen X require /dev/random
:et. al., so I seriously doubt the quality of their PRNG.

in this case, we are talking about the proxy secret/cookie, which is
generated by ssh, so for openssh it depends on how good the client
platform's arc4random() is.




More information about the openssh-unix-dev mailing list