[OmniOS-discuss] Last OmniOS bloody update for 2014 (long, please read)

[Dan McDonald]

> On Dec 19, 2014, at 9:55 PM, Paul B. Henson <henson at acm.org> wrote:
> , cool. I can see how that would be helpful if you are deploying a zone
> that will have an untrustworthy entity with privileges and you want to keep
> them from abusing the network.
> 

For it to be REALLY useful, some brand code will have to happen.  You need something to read /etc/ipf/zones/<blah> from the global zone, and only the brand code that handles "boot" methods can do it right.  I'm not doing that right now.

Dan