|
@@ -520,12 +520,34 @@ It should return the message "/Factory/". This is intended to provide an indica
|
520
|
520
|
hashlet --bus=/dev/i2c-2 personalize
|
521
|
521
|
#+END_SRC
|
522
|
522
|
|
523
|
|
-Nothing should be returned by this command, but a file called ~/.hashlet will be generate which is the private key of the device. To make sure it's only accessible by the root user:
|
|
523
|
+Nothing should be returned by this command, but a file called ~/.hashlet will be generated which is the private key of the device. To make sure it's only accessible by the root user:
|
524
|
524
|
|
525
|
525
|
#+BEGIN_SRC: bash
|
526
|
526
|
chmod 400 ~/.hashlet
|
527
|
527
|
#+END_SRC
|
528
|
528
|
|
|
529
|
+#+BEGIN_SRC: bash
|
|
530
|
+mknod /dev/hashletrng p
|
|
531
|
+emacs /root/hashletupdate
|
|
532
|
+#+END_SRC
|
|
533
|
+
|
|
534
|
+Add the following:
|
|
535
|
+
|
|
536
|
+#+BEGIN_SRC: bash
|
|
537
|
+#!/bin/sh
|
|
538
|
+
|
|
539
|
+while :
|
|
540
|
+do
|
|
541
|
+hashlet --bus=/dev/i2c-2 random > /dev/hashletrng # 32 bytes at a time...
|
|
542
|
+done
|
|
543
|
+#+END_SRC
|
|
544
|
+
|
|
545
|
+Save and exit.
|
|
546
|
+
|
|
547
|
+#+BEGIN_SRC: bash
|
|
548
|
+chmod +x /root/hashletupdate
|
|
549
|
+#+END_SRC
|
|
550
|
+
|
529
|
551
|
** Alter ssh configuration
|
530
|
552
|
|
531
|
553
|
Altering the ssh configuration will make it a little more secure than the standard Debian settings.
|