From owner-freebsd-security@FreeBSD.ORG  Sat May  6 11:11:46 2006
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
X-Original-To: freebsd-security@freebsd.org
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 99B4316A400
	for <freebsd-security@freebsd.org>;
	Sat,  6 May 2006 11:11:46 +0000 (UTC)
	(envelope-from nospam@mgedv.net)
Received: from mgedv.at (mail.mgedv.at [195.3.87.103])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 1361B43D4C
	for <freebsd-security@freebsd.org>;
	Sat,  6 May 2006 11:11:45 +0000 (GMT)
	(envelope-from nospam@mgedv.net)
Received: from metis (localhost [127.0.0.1])
	by mgedv.at (SMTPServer) with ESMTP id EFCDC186864
	for <freebsd-security@freebsd.org>;
	Sat,  6 May 2006 13:11:32 +0200 (MEST)
From: "No@SPAM@mgEDV.net" <nospam@mgedv.net>
To: <freebsd-security@freebsd.org>
Date: Sat, 6 May 2006 13:11:39 +0200
Message-ID: <000001c670fd$d9169350$01010101@avalon.lan>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
Thread-Index: AcZw/dbmAwA0p4rGSXSPVFU97AvcYw==
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
Subject: kern.randompid: jot generation senseful?
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: nospam@mgedv.net
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 06 May 2006 11:11:46 -0000


hi,

is a random pid generation really a security enhancement?

if yes, would it make sense to setup something like:
--> sysctl kern.randompid=`jot -r 1 500 2000`
in cron to be executed every X mins/hrs?

and finally, what are the recommended minimum (security)
and maximum (performance) values for kern.randompid?