On Tue, Apr 12, 2022, 13:36 Udo Grabowski (IMK) <[email protected]> wrote:
> On 12/04/2022 20:29, Judah Richardson wrote: > > On Tue, Apr 12, 2022, 13:27 Udo Grabowski (IMK) <[email protected]> > > wrote: > > > >> On 12/04/2022 20:00, John D Groenveld wrote: > >>> In message <[email protected]>, "Udo > >> Grabowski (IMK) > >>> " writes: > >>>> No, it isn't, it's controlled by > >>>> /lib/svc/manifest/network/routing/route.xml , > >>>> which is not enabled by default, as practically no machine > >>>> in the field is working as a router, you have to specifically > >>>> enable the route:default service. > >>> > >>> svc:/network/routing/route is enabled out of the box with > >>> OI-hipster-text-20211031.iso > >> > >> Why ?? This hasn't been the case for at least two decades of > >> Solaris and beyond. > > > > Probably an oversight, I'd guess. As with many such situations, things > that > > aren't obviously and critically broken don't get much attention ;) > > In fact, it is critically broken, as a routing service introduces > a whole new security context that can open critical intrusion pathes. > Ah, TIL. It'll probably be late next week before I can take another crack at resolving this issue on my end and report anything useful. For now I'm hoping the adjustment I made earlier does the trick. > > _______________________________________________ > openindiana-discuss mailing list > [email protected] > https://openindiana.org/mailman/listinfo/openindiana-discuss > _______________________________________________ openindiana-discuss mailing list [email protected] https://openindiana.org/mailman/listinfo/openindiana-discuss
