Change the default list of PRNG devices from

  /dev/urandom /dev/random
to
  /dev/random /dev/srandom /dev/urandom

because the es_dev module can handle reads from devices that may block
without ever blocking for an unbounded amount of time.

1 files changed, 1 insertions, 1 deletions

diff --git a/src/policy.cpp b/src/policy.cpp
index e8906c4ba..d27d4e2d9 100644
--- a/src/policy.cpp
+++ b/src/policy.cpp
@@ -229,7 +229,7 @@ void set_default_config(Config& config)
 
    config.set_option("rng/ms_capi_prov_type", "INTEL_SEC:RSA_FULL");
    config.set_option("rng/unix_path", "/bin:/sbin:/usr/bin:/usr/sbin");
-   config.set_option("rng/es_files", "/dev/urandom:/dev/random");
+   config.set_option("rng/es_files", "/dev/random:/dev/srandom:/dev/urandom");
    config.set_option("rng/egd_path",
                      "/var/run/egd-pool:/dev/egd-pool");
    config.set_option("rng/slow_poll_request", "256");