Files
packages/utils/rng-tools/files/rngd.init
John Audia 513e8c598c rngd-tools: run as unprivileged user
For better security and isolation, used the -D option to run as newly
created unprivileged user.

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <therealgraysky@proton.me>
2025-07-26 09:57:58 +03:00

27 lines
653 B
Bash

#!/bin/sh /etc/rc.common
# Copyright (C) 2011-2014 OpenWrt.org
START=00
USE_PROCD=1
PROG=/sbin/rngd
start_service() {
local enabled=$(uci -q get system.@rngd[0].enabled)
local precmd=$(uci -q get system.@rngd[0].precmd)
local device=$(uci -q get system.@rngd[0].device)
local watermark=$(uci -q get system.@rngd[0].fill_watermark)
[ "$enabled" = "1" ] || return
[ -z "$precmd" ] || ${precmd} ${device}
[ -z "$device" ] || device="-r ${device}"
[ -z "$watermark" ] || watermark="-W ${watermark}"
procd_open_instance
procd_set_param command "$PROG" -D rngd:rngd -f ${device} ${watermark}
procd_set_param stderr 1
procd_close_instance
}