Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Check */dev/urandom* access on admin overview page #50175

Closed
cgzones opened this issue Jan 14, 2025 · 1 comment
Closed

Check */dev/urandom* access on admin overview page #50175

cgzones opened this issue Jan 14, 2025 · 1 comment
Labels
1. to develop Accepted and waiting to be taken care of enhancement

Comments

@cgzones
Copy link

cgzones commented Jan 14, 2025

How to use GitHub

  • Please use the 👍 reaction to show that you are interested into the same feature.
  • Please don't comment if you have no relevant information to add. It's just extra noise for everyone subscribed to this issue.
  • Subscribe to receive notifications on status change and new comments.

Is your feature request related to a problem? Please describe.

According to the official documentation, https://docs.nextcloud.com/server/30/admin_manual/installation/harden_server.html#give-php-read-access-to-dev-urandom, permitting access to /dev/urandom is recommended. So it would make sense to check whether nextcloud has actually access to it on the admin overview page.

@cgzones cgzones added 0. Needs triage Pending check for reproducibility or if it fits our roadmap enhancement labels Jan 14, 2025
@susnux susnux added 1. to develop Accepted and waiting to be taken care of and removed 0. Needs triage Pending check for reproducibility or if it fits our roadmap labels Jan 15, 2025
@susnux
Copy link
Contributor

susnux commented Jan 15, 2025

This is already done by the Random generator setup check.
/dev/urandom is only used if getrandom is not available.

So if both is not the case you have missing permissions or a problem with the randomness source of your system.

@susnux susnux closed this as completed Jan 15, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
1. to develop Accepted and waiting to be taken care of enhancement
Projects
None yet
Development

No branches or pull requests

2 participants