From: Ben Kaduk <kaduk@mit.edu>
Date: Tue, 2 Jul 2013 15:13:25 +0000 (-0400)
Subject: Disable some heimdal bits
X-Git-Tag: upstream/1.8.0_pre1^2~1100
X-Git-Url: https://git.michaelhowe.org/gitweb/?a=commitdiff_plain;h=ef860802add62076ca6097808458706d3db8d0da;p=packages%2Fo%2Fopenafs.git

Disable some heimdal bits

For the rfc3961 library, we don't want linker exposure to an
entropy-gathering daemon, and we don't want to be leaving entropy
seed files around in user homedirs.

Change-Id: I54546ad44fcdfac8227e72b68a33fa4f61df50b0
Reviewed-on: http://gerrit.openafs.org/10049
Tested-by: BuildBot <buildbot@rampaginggeek.com>
Reviewed-by: Simon Wilkinson <simonxwilkinson@gmail.com>
Reviewed-by: Jeffrey Altman <jaltman@your-file-system.com>
---

diff --git a/src/crypto/rfc3961/krb5_locl.h b/src/crypto/rfc3961/krb5_locl.h
index 79bf02255..ee4f7d8d6 100644
--- a/src/crypto/rfc3961/krb5_locl.h
+++ b/src/crypto/rfc3961/krb5_locl.h
@@ -40,6 +40,9 @@
 #define HEIM_CRYPTO_NO_ARCFOUR
 #define HEIM_CRYPTO_NO_PK
 
+#define NO_RAND_EGD_METHOD
+#define NO_RANDFILE
+
 #define ALLOC(X, N) (X) = calloc((N), sizeof(*(X)))
 
 #ifndef max