Document new rand/mt_rand features

Add reseeding on srand/mt_srand if ignore is activated

1 files changed, 19 insertions, 0 deletions

diff --git a/suhosin.ini b/suhosin.ini
index 3d3e89b..ce8e8e9 100644
--- a/suhosin.ini
+++ b/suhosin.ini
@@ -191,6 +191,25 @@ suhosin.mail.protect = 1
 ;suhosin.memory_limit = 0
 
 ; -----------------------------------------------------------------------------
+; Randomness Options
+
+; Flag that controls if calls to srand() are ignored in favour of suhosin's 
+; own enhanced seeding - since 0.9.36 calls will trigger auto-reseeding
+;suhosin.srand.ignore = On
+
+; Flag that controls if calls to mt_srand() are ignored in favour of suhosin's 
+; own enhanced seeding - since 0.9.36 calls will trigger auto-reseeding
+;suhosin.mt_srand.ignore = On
+
+; Server configuration can add a string into the entropy generation to further
+; improve the entropy used for reseeding rand()/mt_rand()
+;suhosin.rand.seedingkey = 
+
+; Controls if automatic reseeding of rand() / mt_rand() is done for every
+; new request. Will improve security but decrease performance.
+; suhosin.rand.reseed_every_request = Off
+
+; -----------------------------------------------------------------------------
 ; Transparent Encryption Options
 
 ; Flag that decides if the transparent session encryption is activated or not.