Re: EGD and PRNGD

Hi Debra,

First of all, if you want to use PRNGD, EGD is OPTIONAL end NOT mandatory on SOlaris 2.6

for compiling EGD you have to do:

Take your source files and decompress them

gzcat egd-0.8.tar.gz | tar xf -

Now, go into EGD dir and:

perl Makefile.PL
make
make test
make install

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

# mkdir -p /opt/prngd/bin
# mkdir -p /opt/prngd/etc

# gzcat prngd-0.9.25.tar.gz | tar xf -
# cd prngd-0.9.25

# cp -p contrib/Solaris-2.6/prngd.conf.solaris-26 /etc/prngd.conf

vi Makefile

Find and Set this variable:

DEFS=-DRANDSAVENAME=\"/opt/prngd/etc/prngd-seed\" -DCONFIGFILE=\"/etc/prngd.conf\"

Compile PRNGD with these options:

# make CC=gcc CFLAGS="-O3 DSOLARIS" SYSLIBS="-lsocket -lnsl"

Do you need more help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

If those options don't run, use these:

# make CC=gcc SYSLIBS="-lsocket -lnsl"

Now proceed to PRNGD configuration as follows:

# cp -p prngd /opt/prngd/bin

# cat /var/log/syslog > /opt/prngd/etc/prngd-seed

# mkdir /var/spool/prngd

Now execute PRNGD daemon as follows:

# /opt/prngd/bin/prngd /var/spool/prngd/pool

Can we help you?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

you can create PRNGD startup script:

# cd /etc/init.d
# vi prngd

#!/bin/sh

pid=`/usr/bin/ps -e | /usr/bin/grep prngd | /usr/bin/sed -e 's/^ *//' -e 's/ .*//'` case $1 in
'start')

        /opt/prngd/bin/prngd /var/spool/prngd/pool
        ;;
'stop')
        if [ "${pid}" != "" ]
        then
                /usr/bin/kill ${pid}
        fi
        ;;
*)
        echo "usage: /etc/init.d/prngd {start|stop}"
        ;;

Now, create links:

# ln -s /etc/init.d/prngd /etc/rc0.d/K30prngd
# ln -s /etc/init.d/prngd /etc/rc1.d/K30prngd
# ln -s /etc/init.d/prngd /etc/rc2.d/S20prngd
# ln -s /etc/init.d/prngd /etc/rcS.d/K30prngd

You can verify prngd functionality with EGD PRNGD:

# /usr/local/bin/egc.pl /var/spool/prngd/pool get
 10211 bits of entropy in pool  

Can't find what you're looking for?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

Wednesday, May 07, 2003, 6:41:25 AM, you wrote:

DTVc> I'm running Solaris 2.6 on a Unix Platform.  I've loaded openssh3.5p1 and
DTVc> load PRNGD.  What I need some info on is, if I'm running with PRNGD do I
DTVc> still need EGD?  and if so I having problems running the 'make' command when
DTVc> trying to configure EGD.  The following is the input from the command

DTVc>         gcc -c  -fno-strict-aliasing -I/usr/local/include
DTVc> -D_LARGEFILE_SOURCE -D_FILE_Oc
DTVc> cc1: Invalid option `-fno-strict-aliasing'
DTVc> *** Error code 1
DTVc> make: Fatal error: Command failed for target `SHA1.o'
DTVc> Current working directory /opt/egd-0.9/Digest-SHA1-2.00

DTVc> I want to redirect the default install directory from '/usr/local' to DTVc> '/opt'. Any help would be appreciated.

DTVc> Thanks
DTVc> DebraT Received on Thu May 8 12:53:33 2003