diff --git a/bind.spec b/bind.spec
index 49d3850..76f373b 100644
--- a/bind.spec
+++ b/bind.spec
@@ -27,7 +27,7 @@ Summary:  The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) serv
 Name:     bind
 License:  ISC
 Version:  9.9.4
-Release:  12.%{?PATCHVER}%{?PREVER}%{?dist}
+Release:  13.%{?PATCHVER}%{?PREVER}%{?dist}
 Epoch:    32
 Url:      http://www.isc.org/products/BIND/
 Buildroot:%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
@@ -815,6 +815,9 @@ rm -rf ${RPM_BUILD_ROOT}
 %endif
 
 %changelog
+* Mon Jun 09 2014 Tomas Hozza <thozza@redhat.com> 32:9.9.4-13.P2
+- Use /dev/urandom for generation of rndc.key (#1079799)
+
 * Wed Mar 05 2014 Tomas Hozza <thozza@redhat.tom> 32:9.9.4-12.P2
 - dlz_dlopen driver could return the wrong error leading to a segfault (#1052781)
 - Fix race condition when freeing fetch object (ISC-Bugs #35385)
diff --git a/generate-rndc-key.sh b/generate-rndc-key.sh
index 454e7fe..194e65b 100755
--- a/generate-rndc-key.sh
+++ b/generate-rndc-key.sh
@@ -6,7 +6,7 @@
 
 if [ ! -s /etc/rndc.key -a ! -s /etc/rndc.conf ]; then
   echo -n $"Generating /etc/rndc.key:"
-  if /usr/sbin/rndc-confgen -a > /dev/null 2>&1; then
+  if /usr/sbin/rndc-confgen -a -r /dev/urandom > /dev/null 2>&1; then
     chmod 640 /etc/rndc.key
     chown root.named /etc/rndc.key
     [ -x /sbin/restorecon ] && /sbin/restorecon /etc/rndc.key