From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 117669 invoked by alias); 7 Dec 2016 10:52:20 -0000 Mailing-List: contact libc-alpha-help@sourceware.org; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: libc-alpha-owner@sourceware.org Received: (qmail 117587 invoked by uid 89); 7 Dec 2016 10:52:17 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-4.9 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD,SPF_HELO_PASS autolearn=ham version=3.3.2 spammy= X-HELO: mx1.redhat.com Subject: Re: [PATCH v9] Add getentropy, getrandom, [BZ #17252] To: Joseph Myers References: <5b8e5866-d071-9e2c-54e7-2ccf857a2fd8@redhat.com> <97f4db91-49d9-83fa-9f67-6cc718629160@redhat.com> <1480697250.14990.52.camel@redhat.com> <680d0bed-b164-b809-d672-e0278fe08d7e@redhat.com> <90908be7-c7db-46f2-a635-27dc5604e47f@panix.com> <9b5ff44f-deaf-4126-9d49-dbe30f14ef82@panix.com> <351a9855-5840-b14d-e8d1-4fcdeb3f6e4c@redhat.com> Cc: Zack Weinberg , Torvald Riegel , GNU C Library From: Florian Weimer Message-ID: Date: Wed, 07 Dec 2016 10:52:00 -0000 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.4.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-SW-Source: 2016-12/txt/msg00229.txt.bz2 On 12/06/2016 06:01 PM, Joseph Myers wrote: > On Tue, 6 Dec 2016, Florian Weimer wrote: > >> What do you suggest we should do if we detect unintended interposition >> (assuming we decide to use the version without redirection first)? > > In the first instance I'd suggest changing the programs with the problem > getrandom / getentropy definitions (to, probably, use glibc's version when > available). We can do that for things in the distribution, true, but I still think it's annoying that if an application defines a getentropy symbol, cryptographic libraries such as OpenSSL could begin to behave in a slightly different way. I can drop the mangling for now if that's the general consensus, but I don't like how I'm pressured into making a change which I consider unnecessarily risky. Florian