v1.9.24
Changes
- Add
--no-command/-Cflag to disable command mode at runtime - Disable command mode in
haveged.serviceandhaveged-once.service - Enable
PrivateNetwork=trueand removeReadWritePaths=/dev/shmin service files - Add PractRand example to man page
The long-running daemon no longer opens a command socket or creates a semaphore in /dev/shm, reducing attack surface. Command mode remains available for boot-time use (haveged-switch-root.service).