Merge pull request pathwar#424 from pathwar/dev/moul/secure-srand

feat: use secure rand seed
cdeleeuwe · Feb 23, 2020 · 8e3ec74 · 8e3ec74
2 parents ad90645 + 3451083
commit 8e3ec74
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 1 deletion.
diff --git a/go/cmd/pathwar/main.go b/go/cmd/pathwar/main.go
@@ -24,6 +24,7 @@ import (
 	"go.uber.org/zap"
 	"go.uber.org/zap/zapcore"
 	"golang.org/x/oauth2"
+	"moul.io/srand"
 	"pathwar.land/go/v2/pkg/errcode"
 	"pathwar.land/go/v2/pkg/pwagent"
 	"pathwar.land/go/v2/pkg/pwapi"
@@ -653,7 +654,7 @@ func ssoFromFlags() (pwsso.Client, error) {
 }
 
 func globalPreRun() error {
-	rand.Seed(time.Now().UnixNano())
+	rand.Seed(srand.Secure())
 	if globalDebug {
 		config := zap.NewDevelopmentConfig()
 		config.Level.SetLevel(zap.DebugLevel)

diff --git a/go/go.mod b/go/go.mod
@@ -50,6 +50,7 @@ require (
 	gopkg.in/yaml.v2 v2.2.7 // indirect
 	gopkg.in/yaml.v3 v3.0.0-20191120175047-4206685974f2
 	moul.io/godev v1.3.0
+	moul.io/srand v1.4.0
 	moul.io/zapgorm v1.0.0
 )
 

diff --git a/go/go.sum b/go/go.sum