OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • Archive »
  • 19.1 Legacy Series »
  • kern.random.harvest.mask, can't set to 351, stays as 65887
« previous next »
  • Print
Pages: [1]

Author Topic: kern.random.harvest.mask, can't set to 351, stays as 65887  (Read 4597 times)

FingerlessGloves

  • Full Member
  • ***
  • Posts: 114
  • Karma: 11
    • View Profile
    • FingerlessGloves
kern.random.harvest.mask, can't set to 351, stays as 65887
« on: March 14, 2019, 08:48:45 pm »
Hi Guys,

I've noticed my kern.random.harvest.mask is set to 65887, I've set it to 351 in tunables, pressed apply then rebooted, yet it still on 65887. I have no idea why. I can see variable set in /boot/loader.conf correctly.

It wasn't in tunables until I manually added it in.


But mask_symbolic doesn't match mask.
Code: [Select]
kern.random.harvest.mask_symbolic: PURE_RDRAND,[UMA],[FS_ATIME],SWI,[INTERRUPT],NET_NG,[NET_ETHER],NET_TUN,MOUSE,KEYBOARD,ATTACH,CACHED
kern.random.harvest.mask_bin: 000010000000101011111
kern.random.harvest.mask: 65887

Is it doing something weird like 65887=2^16+351 ??

Fresh install of OPNSense 19.1.4

Jonny
« Last Edit: March 14, 2019, 10:08:52 pm by Jonny »
Logged
Adventuring through internet pipes
My Blog

FingerlessGloves

  • Full Member
  • ***
  • Posts: 114
  • Karma: 11
    • View Profile
    • FingerlessGloves
Re: kern.random.harvest.mask, can't set to 351, stays as 65887
« Reply #1 on: March 14, 2019, 10:11:16 pm »
#FreeBSD on FreeNode
 Told me to point you guys towards this file. Hopefully this helps.

https://github.com/HardenedBSD/hardenedBSD/blob/hardened/current/master/sys/dev/random/random_harvestq.c

They also said /boot/loader.conf  is wrong place for it as it is not loader tunnable.
Logged
Adventuring through internet pipes
My Blog

lattera

  • Full Member
  • ***
  • Posts: 207
  • Karma: 82
    • View Profile
Re: kern.random.harvest.mask, can't set to 351, stays as 65887
« Reply #2 on: March 15, 2019, 12:02:52 am »
The HardenedBSD team is looking at this. Thanks for the report!
Logged

pylox

  • Jr. Member
  • **
  • Posts: 50
  • Karma: 8
    • View Profile
    • WbaSec Solutions
Re: kern.random.harvest.mask, can't set to 351, stays as 65887
« Reply #3 on: March 18, 2019, 09:00:42 am »
Hi lattera,

i've observed this topic too ...because is relevant for network performance (especially on weak embedded  devices, e.g. APU). Is there currently impact on this or is it only a  "display" - Problem ?

regards pylox

Logged

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • Archive »
  • 19.1 Legacy Series »
  • kern.random.harvest.mask, can't set to 351, stays as 65887
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2024 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2