- (bal) ssh-keysign should build and install correctly now. Phase two

   would be to clean out any dead wood and disable ssh setuid on install.

1 files changed, 4 insertions, 0 deletions

diff --git a/ssh-keysign.c b/ssh-keysign.c
index da630708d..bb70c7dfb 100644
--- a/ssh-keysign.c
+++ b/ssh-keysign.c
@@ -137,6 +137,10 @@ main(int argc, char **argv)
         seteuid(getuid());
         setuid(getuid());
 
+        init_rng();
+        seed_rng();
+        arc4random_stir();
+
 #ifdef DEBUG_SSH_KEYSIGN
         log_init("ssh-keysign", SYSLOG_LEVEL_DEBUG3, SYSLOG_FACILITY_AUTH, 0);
 #endif