can I kill prngd 2

[greenpee]

Hi,

If I kill this, will cause any problem? My website uses SSL for long time, but it is only recently,I see this process.

... 0 0 1768K 800K cpu2 506.2H 44.04% prngd

Thanks,

 

[djr111]

I would assume you are running openssh?

there are cases that I actually found of people having the same issue as you.

URL of someone with a similiar issue

http://www.sunmanagers.org/pipermail/sunmanagers/2004-July/031447.html

I have found one doc stating that prngd is optional, thus it is not necessary to keep running.

As with anything though, it is your call because it is your server. attached is the doc I found.

shows necessary and optptional pkgs for openssh

http://www.sunfreeware.com/openssh26-7.html

Hope this sheds some light...

 

[coffeysm]

I think on the real older versions of Solaris including early releases of 8. They did not have a /dev/random capability, there is a patch that has been around for some time though that provides this. If you have that then I do not see a need for prngd running.

 

[greenpee]

thanks. I couldn't find /dev/random on my server. How bad can it be if I leave prngd running?

 

[djr111]

Do you have this patch or this pkg installed on your server, if so /dev/random should be there.

patch: 112438-01 or later
pkg: SUNWski

 

[coffeysm]

To be honest I do not know how it effects, but I am assuming you will want to keep it running. That programs is what gathers the entropy and what not for creating the secure keys or something I think. I would apply that patch if you haven't it is a lot easier. You have to reboot though, but I found a doc once on the Internet how to get it working without a reboot.

 

[greenpee]

I don't know much about Unix. How can I check if the server is patched?

 

[djr111]

cd /var/sadm/patch <enter>

ls <enter>

look thru the list for the patch.

cd /var/sadm/pkg <enter>

ls <enter>

look for the pkg mentioned


hope this helps

 

[linnorm]

(As root)

pkginfo | grep SUNWski

showrev -p | grep 112438

These should be a little easier to use than djr111's instructions.

 

[kHz]

Solaris 8 didn't have /dev/random and if you want to run ssh then you will have to have prngd.

 

[coffeysm]

kHz,

That is true, however, they released a patch a couple years ago that gave it the capability now. I been using SSH on Solaris 8 without prngd for atleast three years.

 

[kHz]

Thanks. Didn't know that. I was running prngd at my last job because it was Solaris 8, though I wanted to go to Solaris 9. I wish I knew that earlier and I would have installed the patch instead.

Guess I should have searched sunsolve.