Author ncoghlan
Recipients martin.panter, ncoghlan, petr.viktorin
Date 2016-09-07.02:46:38
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <1473216399.07.0.223374788136.issue27990@psf.upfronthosting.co.za>
In-reply-to
Content
The configure script determines the setting for HAVE_GETRANDOM_SYSCALL at build time, which means the dynamic check for getrandom() support in the Linux kernel gets disabled when building against an older kernel.

This impacts the implicit use of getrandom() in os.urandom(): https://mail.python.org/pipermail/security-sig/2016-June/000060.html

And also the new os.getrandom() API added in #27778: http://bugs.python.org/issue27778#msg274698

It's desirable to have a way of forcing the inclusion of the dynamic runtime check, even if the currently running kernel doesn't provide the syscall itself.
History
Date User Action Args
2016-09-07 02:46:39ncoghlansetrecipients: + ncoghlan, petr.viktorin, martin.panter
2016-09-07 02:46:39ncoghlansetmessageid: <1473216399.07.0.223374788136.issue27990@psf.upfronthosting.co.za>
2016-09-07 02:46:39ncoghlanlinkissue27990 messages
2016-09-07 02:46:38ncoghlancreate