Skip to content

v1.9.24

Choose a tag to compare

@jirka-h jirka-h released this 19 Jun 13:00

Changes

  • Add --no-command / -C flag to disable command mode at runtime
  • Disable command mode in haveged.service and haveged-once.service
  • Enable PrivateNetwork=true and remove ReadWritePaths=/dev/shm in service files
  • Add PractRand example to man page

The long-running daemon no longer opens a command socket or creates a semaphore in /dev/shm, reducing attack surface. Command mode remains available for boot-time use (haveged-switch-root.service).