git.tinc-vpn.org Git - tinc/commit

author	Kirill Isakov <bootctl@gmail.com>
	Mon, 2 May 2022 09:41:03 +0000 (15:41 +0600)
committer	Kirill Isakov <bootctl@gmail.com>
	Mon, 2 May 2022 18:49:02 +0000 (00:49 +0600)
commit	c32235ac0ef4ce8af77d59c6186436c49c3d7386
tree	e78aedaf47c75d75e3976e26362b04c258584977	tree \| snapshot
parent	f86a5f1d70206321b01ec60f6a69f8cbf1a2b732	commit \| diff

gcrypt: initialize secure memory on startup

Otherwise libgcrypt does it automatically, but only after we drop
privileges. This requires calling mlock(), which kills the sandboxed
process on OpenBSD.

If this is not enough, libgcrypt will resize the pool without calling
mlock().

src/gcrypt/crypto.c	[new file with mode: 0644]	blob
src/gcrypt/meson.build		diff \| blob \| history
src/meson.build		diff \| blob \| history
src/nolegacy/crypto.c	[moved from src/crypto.c with 97% similarity]	diff \| blob \| history
src/nolegacy/meson.build		diff \| blob \| history

tinc, the VPN daemon

RSS Atom