Linux? We have encouraged Ted Ts'o to create a getentropy-like interface for Linux; getrandom() Too many options, too easy to misuse Hope applications do not directly call such interfaces There are more problems here than just "inside chroot" or "no more file descriptors" Bit worrying