From d2ae5f0c4657eacfb528430daef8981abdb9d3b5 Mon Sep 17 00:00:00 2001
From: "mkanat%bugzilla.org" <>
Date: Tue, 3 Feb 2009 09:58:46 +0000
Subject: Bug 476594: [SECURITY] Calling srand() at startup time in mod_perl
 makes the same token be generated over and over Patch By Max Kanat-Alexander
 <mkanat@bugzilla.org> r=justdave, a=mkanat

---
 Bugzilla/Install/Localconfig.pm | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'Bugzilla')

diff --git a/Bugzilla/Install/Localconfig.pm b/Bugzilla/Install/Localconfig.pm
index e22a47afa..5cd7755e8 100644
--- a/Bugzilla/Install/Localconfig.pm
+++ b/Bugzilla/Install/Localconfig.pm
@@ -188,7 +188,7 @@ EOT
     },
     {
         name    => 'site_wide_secret',
-        default => generate_random_password(256),
+        default => sub { generate_random_password(256) },
         desc    => <<EOT
 # This secret key is used by your installation for the creation and
 # validation of encrypted tokens to prevent unsolicited changes,
-- 
cgit v1.2.3-24-g4f1b