Bug 476594: [SECURITY] Calling srand() at startup time in mod_perl makes the same...

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=justdave, a=mkanat

diff --git a/Bugzilla/Install/Localconfig.pm b/Bugzilla/Install/Localconfig.pm
index ce94f5b838377b728c4aadcad27da4dc3331d587..041e7a05ab8325886c0b6c9611961b0992c88f14 100644 (file)
--- a/Bugzilla/Install/Localconfig.pm
+++ b/Bugzilla/Install/Localconfig.pm
@@ -186,7 +186,7 @@ EOT
     },
     {
         name    => 'site_wide_secret',
-        default => generate_random_password(256),
+        default => sub { generate_random_password(256) },
         desc    => <<EOT
 # This secret key is used by your installation for the creation and
 # validation of encrypted tokens to prevent unsolicited changes,