[PATCH] gensignkey: ensure host keys are flushed to disk

Alexander Dahl post at lespocky.de
Wed Oct 29 00:11:03 AWST 2014


Hei hei,

On 28.10.2014 14:11, Peter Korsgaard wrote:
> Otherwise we can end up with an empty host key, breaking logins.
> 
> E.G.:
> 
> Run dropbear -R and pull power before the host key is writting to disk.
> After reboot we have:
> 
> ls -l /etc/dropbear/
> -rw-------    1 root     root        0 Oct 28 10:41 dropbear_ecdsa_host_key
> 
> Which dropbear will try to read and fail:

I can confirm this can happen in the wild. We already had this issue and
circumvented it by calling sync on the shell somewhere else in the init
process, however I consider it a more elegant solution if dropbear would
ensure this by itself.

Greets
Alex


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 259 bytes
Desc: OpenPGP digital signature
Url : http://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/attachments/20141028/a5afbb14/attachment.sig 


More information about the Dropbear mailing list