[OpenIndiana-discuss] OI Hipster becomes unreachable over network after a certain length of uptime

[Udo Grabowski (IMK)]

On 12/04/2022 20:29, Judah Richardson wrote:
> On Tue, Apr 12, 2022, 13:27 Udo Grabowski (IMK) <udo.grabowski at kit.edu>
> wrote:
> 
>> On 12/04/2022 20:00, John D Groenveld wrote:
>>> In message <e042f009-5caa-bae0-5181-d294d4ad213b at kit.edu>, "Udo
>> Grabowski (IMK)
>>> " writes:
>>>> No, it isn't, it's controlled by
>>>> /lib/svc/manifest/network/routing/route.xml ,
>>>> which is not enabled by default, as practically no machine
>>>> in the field is working as a router, you have to specifically
>>>> enable the route:default service.
>>>
>>> svc:/network/routing/route is enabled out of the box with
>>> OI-hipster-text-20211031.iso
>>
>> Why ?? This hasn't been the case for at least two decades of
>> Solaris and beyond.
> 
> Probably an oversight, I'd guess. As with many such situations, things that
> aren't obviously and critically broken don't get much attention ;)

In fact, it is critically broken, as a routing service introduces
a whole new security context that can open critical intrusion pathes.