在SELS中配置SSH用户等效性时,遇到错误:PRNG is not seeded

来源:互联网 发布:网络层ddos 编辑:程序博客网 时间:2024/04/25 22:34

在执行 ssh-keygen -t rsa

oracle@dbs2:~> ssh-keygen -t rsa
PRNG is not seeded


百思不得其解,因为新装的系统。

然后strace了下ssh-keygen

oracle@dbs2:~> strace ssh-keygen -t rsa
execve("/usr/bin/ssh-keygen", ["ssh-keygen", "-t", "rsa"], [/* 52 vars */]) = 0
brk(0)                                  = 0x7f7aafed1000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7aafca6000
access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or directory)
open("/oracle/app/oracle/product/10.2.0/db_1/lib/tls/x86_64/libcrypto.so.0.9.8", O_RDONLY) = -1 ENOENT (No such file or directory)
stat("/oracle/app/oracle/product/10.2.0/db_1/lib/tls/x86_64", 0x7fff6ab965f0) = -1 ENOENT (No such file or directory)
open("/oracle/app/oracle/product/10.2.0/db_1/lib/tls/libcrypto.so.0.9.8", O_RDONLY) = -1 ENOENT (No such file or directory)
stat("/oracle/app/oracle/product/10.2.0/db_1/lib/tls", 0x7fff6ab965f0) = -1 ENOENT (No such file or directory)
open("/oracle/app/oracle/product/10.2.0/db_1/lib/x86_64/libcrypto.so.0.9.8", O_RDONLY) = -1 ENOENT (No such file or directory)
stat("/oracle/app/oracle/product/10.2.0/db_1/lib/x86_64", 0x7fff6ab965f0) = -1 ENOENT (No such file or directory)
open("/oracle/app/oracle/product/10.2.0/db_1/lib/libcrypto.so.0.9.8", O_RDONLY) = -1 ENOENT (No such file or directory)
stat("/oracle/app/oracle/product/10.2.0/db_1/lib", 0x7fff6ab965f0) = -1 ENOENT (No such file or directory)
open("/oracle/app/oracle/product/10.2.0/db_1/lib32/tls/x86_64/libcrypto.so.0.9.8", O_RDONLY) = -1 ENOENT (No such file or directory)
stat("/oracle/app/oracle/product/10.2.0/db_1/lib32/tls/x86_64", 0x7fff6ab965f0) = -1 ENOENT (No such file or directory)
open("/oracle/app/oracle/product/10.2.0/db_1/lib32/tls/libcrypto.so.0.9.8", O_RDONLY) = -1 ENOENT (No such file or directory)
stat("/oracle/app/oracle/product/10.2.0/db_1/lib32/tls", 0x7fff6ab965f0) = -1 ENOENT (No such file or directory)
open("/oracle/app/oracle/product/10.2.0/db_1/lib32/x86_64/libcrypto.so.0.9.8", O_RDONLY) = -1 ENOENT (No such file or directory)
stat("/oracle/app/oracle/product/10.2.0/db_1/lib32/x86_64", 0x7fff6ab965f0) = -1 ENOENT (No such file or directory)
open("/oracle/app/oracle/product/10.2.0/db_1/lib32/libcrypto.so.0.9.8", O_RDONLY) = -1 ENOENT (No such file or directory)
stat("/oracle/app/oracle/product/10.2.0/db_1/lib32", 0x7fff6ab965f0) = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY)      = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=196081, ...}) = 0
mmap(NULL, 196081, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f7aafc76000
close(3)                                = 0
open("/usr/lib64/libcrypto.so.0.9.8", O_RDONLY) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0P{\6\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0555, st_size=1538896, ...}) = 0
mmap(NULL, 3648920, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f7aaf70e000
fadvise64(3, 0, 3648920, POSIX_FADV_WILLNEED) = 0
mprotect(0x7f7aaf862000, 2097152, PROT_NONE) = 0
mmap(0x7f7aafa62000, 147456, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x154000) = 0x7f7aafa62000
mmap(0x7f7aafa86000, 11672, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f7aafa86000
close(3)                                = 0
open("/lib64/libutil.so.1", O_RDONLY)   = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0000\16\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=14325, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7aafc75000
mmap(NULL, 2105608, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f7aaf50b000
fadvise64(3, 0, 2105608, POSIX_FADV_WILLNEED) = 0
mprotect(0x7f7aaf50d000, 2093056, PROT_NONE) = 0
mmap(0x7f7aaf70c000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1000) = 0x7f7aaf70c000
close(3)                                = 0
open("/lib64/libz.so.1", O_RDONLY)      = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0`\"\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=88704, ...}) = 0
mmap(NULL, 2183728, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f7aaf2f5000
fadvise64(3, 0, 2183728, POSIX_FADV_WILLNEED) = 0
mprotect(0x7f7aaf30a000, 2093056, PROT_NONE) = 0
mmap(0x7f7aaf509000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x14000) = 0x7f7aaf509000
close(3)                                = 0
open("/lib64/libnsl.so.1", O_RDONLY)    = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340@\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=108213, ...}) = 0
mmap(NULL, 2194128, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f7aaf0dd000
fadvise64(3, 0, 2194128, POSIX_FADV_WILLNEED) = 0
mprotect(0x7f7aaf0f2000, 2093056, PROT_NONE) = 0
mmap(0x7f7aaf2f1000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x14000) = 0x7f7aaf2f1000
mmap(0x7f7aaf2f3000, 6864, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f7aaf2f3000
close(3)                                = 0
open("/lib64/libcrypt.so.1", O_RDONLY)  = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0p\n\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=57416, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7aafc74000
mmap(NULL, 2335200, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f7aaeea2000
fadvise64(3, 0, 2335200, POSIX_FADV_WILLNEED) = 0
mprotect(0x7f7aaeeae000, 2093056, PROT_NONE) = 0
mmap(0x7f7aaf0ad000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f7aaf0ad000
mmap(0x7f7aaf0af000, 184800, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f7aaf0af000
close(3)                                = 0
open("/usr/lib64/libopensc.so.2", O_RDONLY) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\200\322\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=661736, ...}) = 0
mmap(NULL, 2767464, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f7aaebfe000
fadvise64(3, 0, 2767464, POSIX_FADV_WILLNEED) = 0
mprotect(0x7f7aaec98000, 2093056, PROT_NONE) = 0
mmap(0x7f7aaee97000, 36864, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x99000) = 0x7f7aaee97000
mmap(0x7f7aaeea0000, 6760, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f7aaeea0000
close(3)                                = 0
open("/lib64/libresolv.so.2", O_RDONLY) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\3408\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=98080, ...}) = 0
mmap(NULL, 2189960, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f7aae9e7000
fadvise64(3, 0, 2189960, POSIX_FADV_WILLNEED) = 0
mprotect(0x7f7aae9fa000, 2097152, PROT_NONE) = 0
mmap(0x7f7aaebfa000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x13000) = 0x7f7aaebfa000
mmap(0x7f7aaebfc000, 6792, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f7aaebfc000
close(3)                                = 0
open("/usr/lib64/libgssapi_krb5.so.2", O_RDONLY) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\320f\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=181808, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7aafc73000
mmap(NULL, 2276912, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f7aae7bb000
fadvise64(3, 0, 2276912, POSIX_FADV_WILLNEED) = 0
mprotect(0x7f7aae7e6000, 2093056, PROT_NONE) = 0
mmap(0x7f7aae9e5000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2a000) = 0x7f7aae9e5000
close(3)                                = 0
open("/usr/lib64/libkrb5.so.3", O_RDONLY) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\220\225\1\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=664216, ...}) = 0
mmap(NULL, 2759328, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f7aae519000
fadvise64(3, 0, 2759328, POSIX_FADV_WILLNEED) = 0
mprotect(0x7f7aae5b7000, 2093056, PROT_NONE) = 0
mmap(0x7f7aae7b6000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x9d000) = 0x7f7aae7b6000
close(3)                                = 0
open("/usr/lib64/libk5crypto.so.3", O_RDONLY) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\200Z\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=154776, ...}) = 0
mmap(NULL, 2250888, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f7aae2f3000
fadvise64(3, 0, 2250888, POSIX_FADV_WILLNEED) = 0
mprotect(0x7f7aae317000, 2093056, PROT_NONE) = 0
mmap(0x7f7aae516000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x23000) = 0x7f7aae516000
close(3)                                = 0
open("/lib64/libcom_err.so.2", O_RDONLY) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\23\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=14720, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7aafc72000
mmap(NULL, 2109840, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f7aae0ef000
fadvise64(3, 0, 2109840, POSIX_FADV_WILLNEED) = 0
mprotect(0x7f7aae0f2000, 2093056, PROT_NONE) = 0
mmap(0x7f7aae2f1000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f7aae2f1000
close(3)                                = 0
open("/lib64/libc.so.6", O_RDONLY)      = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\354\1\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=1661454, ...}) = 0
mmap(NULL, 3528776, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f7aadd91000
fadvise64(3, 0, 3528776, POSIX_FADV_WILLNEED) = 0
mprotect(0x7f7aadee5000, 2097152, PROT_NONE) = 0
mmap(0x7f7aae0e5000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x154000) = 0x7f7aae0e5000
mmap(0x7f7aae0ea000, 18504, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f7aae0ea000
close(3)                                = 0
open("/lib64/libdl.so.2", O_RDONLY)     = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\360\r\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=19114, ...}) = 0
mmap(NULL, 2109696, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f7aadb8d000
fadvise64(3, 0, 2109696, POSIX_FADV_WILLNEED) = 0
mprotect(0x7f7aadb8f000, 2097152, PROT_NONE) = 0
mmap(0x7f7aadd8f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f7aadd8f000
close(3)                                = 0
open("/usr/lib64/libopenct.so.1", O_RDONLY) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\3600\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=39824, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7aafc71000
mmap(NULL, 2136160, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f7aad983000
fadvise64(3, 0, 2136160, POSIX_FADV_WILLNEED) = 0
mprotect(0x7f7aad98b000, 2097152, PROT_NONE) = 0
mmap(0x7f7aadb8b000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8000) = 0x7f7aadb8b000
close(3)                                = 0
open("/usr/lib64/libltdl.so.7", O_RDONLY) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\260&\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=39600, ...}) = 0
mmap(NULL, 2134704, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f7aad779000
fadvise64(3, 0, 2134704, POSIX_FADV_WILLNEED) = 0
mprotect(0x7f7aad782000, 2093056, PROT_NONE) = 0
mmap(0x7f7aad981000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8000) = 0x7f7aad981000
close(3)                                = 0
open("/usr/lib64/libscconf.so.2", O_RDONLY) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\260\26\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=22944, ...}) = 0
mmap(NULL, 2118592, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f7aad573000
fadvise64(3, 0, 2118592, POSIX_FADV_WILLNEED) = 0
mprotect(0x7f7aad578000, 2093056, PROT_NONE) = 0
mmap(0x7f7aad777000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f7aad777000
close(3)                                = 0
open("/usr/lib64/libkrb5support.so.0", O_RDONLY) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\240\36\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=35800, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7aafc70000
mmap(NULL, 2130864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f7aad36a000
fadvise64(3, 0, 2130864, POSIX_FADV_WILLNEED) = 0
mprotect(0x7f7aad371000, 2097152, PROT_NONE) = 0
mmap(0x7f7aad571000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x7000) = 0x7f7aad571000
close(3)                                = 0
open("/lib64/libkeyutils.so.1", O_RDONLY) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\260\v\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=10336, ...}) = 0
mmap(NULL, 2105424, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f7aad167000
fadvise64(3, 0, 2105424, POSIX_FADV_WILLNEED) = 0
mprotect(0x7f7aad169000, 2093056, PROT_NONE) = 0
mmap(0x7f7aad368000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1000) = 0x7f7aad368000
close(3)                                = 0
open("/lib64/libpthread.so.0", O_RDONLY) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0@Z\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=135646, ...}) = 0
mmap(NULL, 2212736, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f7aacf4a000
fadvise64(3, 0, 2212736, POSIX_FADV_WILLNEED) = 0
mprotect(0x7f7aacf61000, 2097152, PROT_NONE) = 0
mmap(0x7f7aad161000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x17000) = 0x7f7aad161000
mmap(0x7f7aad163000, 13184, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f7aad163000
close(3)                                = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7aafc6f000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7aafc6e000
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7aafc6c000
arch_prctl(ARCH_SET_FS, 0x7f7aafc6c720) = 0
mprotect(0x7f7aad161000, 4096, PROT_READ) = 0
mprotect(0x7f7aad368000, 4096, PROT_READ) = 0
mprotect(0x7f7aad571000, 4096, PROT_READ) = 0
mprotect(0x7f7aad777000, 4096, PROT_READ) = 0
mprotect(0x7f7aad981000, 4096, PROT_READ) = 0
mprotect(0x7f7aadb8b000, 4096, PROT_READ) = 0
mprotect(0x7f7aadd8f000, 4096, PROT_READ) = 0
mprotect(0x7f7aae0e5000, 16384, PROT_READ) = 0
mprotect(0x7f7aae2f1000, 4096, PROT_READ) = 0
mprotect(0x7f7aae516000, 8192, PROT_READ) = 0
mprotect(0x7f7aae7b6000, 12288, PROT_READ) = 0
mprotect(0x7f7aae9e5000, 4096, PROT_READ) = 0
mprotect(0x7f7aaebfa000, 4096, PROT_READ) = 0
mprotect(0x7f7aaee97000, 20480, PROT_READ) = 0
mprotect(0x7f7aaf0ad000, 4096, PROT_READ) = 0
mprotect(0x7f7aaf2f1000, 4096, PROT_READ) = 0
mprotect(0x7f7aaf509000, 4096, PROT_READ) = 0
mprotect(0x7f7aaf70c000, 4096, PROT_READ) = 0
mprotect(0x7f7aafa62000, 53248, PROT_READ) = 0
mprotect(0x7f7aafece000, 4096, PROT_READ) = 0
mprotect(0x7f7aafca7000, 4096, PROT_READ) = 0
munmap(0x7f7aafc76000, 196081)          = 0
set_tid_address(0x7f7aafc6c9f0)         = 6379
set_robust_list(0x7f7aafc6ca00, 0x18)   = 0
futex(0x7fff6ab96ebc, FUTEX_WAKE_PRIVATE, 1) = 0
futex(0x7fff6ab96ebc, 0x189 /* FUTEX_??? */, 1, NULL, 7f7aafc6c720) = -1 EAGAIN (Resource temporarily unavailable)
rt_sigaction(SIGRTMIN, {0x7f7aacf4f8b0, [], SA_RESTORER|SA_SIGINFO, 0x7f7aacf595d0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {0x7f7aacf4f940, [], SA_RESTORER|SA_RESTART|SA_SIGINFO, 0x7f7aacf595d0}, NULL, 8) = 0
rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM_INFINITY}) = 0
open("/dev/null", O_RDWR)               = 3
close(3)                                = 0
brk(0)                                  = 0x7f7aafed1000
brk(0x7f7aafef2000)                     = 0x7f7aafef2000
open("/etc/ssl/openssl.cnf", O_RDONLY)  = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=9374, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7aafca5000
read(3, "#\n# OpenSSL example configuratio"..., 4096) = 4096
read(3, "_name ]\ncountryName\t\t\t= Country "..., 4096) = 4096
read(3, " an SSL server.\n# nsCertType\t\t\t="..., 4096) = 1182
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0x7f7aafca5000, 4096)            = 0
open("/dev/urandom", O_RDONLY|O_NOCTTY|O_NONBLOCK) = -1 EACCES (Permission denied)   <<<<<<<<<<<<<<<<<<在此处可发现问题,
open("/dev/random", O_RDONLY|O_NOCTTY|O_NONBLOCK) = -1 EACCES (Permission denied)<<<<<<<<<<<<<<<<<<<<在访问/dev/urandom和/dev/random时,无权限
open("/dev/srandom", O_RDONLY|O_NOCTTY|O_NONBLOCK) = -1 ENOENT (No such file or directory)
socket(PF_FILE, SOCK_STREAM, 0)         = 3
connect(3, {sa_family=AF_FILE, path="/var/run/egd-pool"}, 19) = -1 ENOENT (No such file or directory)
close(3)                                = 0
socket(PF_FILE, SOCK_STREAM, 0)         = 3
connect(3, {sa_family=AF_FILE, path="/dev/egd-pool"}, 15) = -1 ENOENT (No such file or directory)
close(3)                                = 0
socket(PF_FILE, SOCK_STREAM, 0)         = 3
connect(3, {sa_family=AF_FILE, path="/etc/egd-pool"}, 15) = -1 ENOENT (No such file or directory)
close(3)                                = 0
socket(PF_FILE, SOCK_STREAM, 0)         = 3
connect(3, {sa_family=AF_FILE, path="/etc/entropy"}, 14) = -1 ENOENT (No such file or directory)
close(3)                                = 0
getuid()                                = 500
write(2, "PRNG is not seeded\r\n", 20PRNG is not seeded
)  = 20
exit_group(255)                         = ?


查询/dev/random 和 /dev/urandom 2个文件的权限:

 oracle@dbs2:~> ls -l /dev/urandom
crw-rw---- 1 root root 1, 9 2013-12-23 18:09 /dev/urandom
oracle@dbs2:~> ls -l /dev/random
crw-rw---- 1 root root 1, 8 2013-12-23 18:09 /dev/random


然后我对照了下,自己虚拟机环境中这2个文件的权限,发现权限确实不对,自己虚拟机中的权限为 666,于是对服务器进行修改:

dbs1:~ # chmod 666 /dev/urandom
dbs1:~ # chmod 660 /dev/random


再次尝试执行ssh-keygen命令,正常,问题解决。





0 0