[Bug 2064966] Re: "accept_source_route" enabled by default in 24.04

[Mark Esler]

** Information type changed from Private Security to Public Security

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to systemd in Ubuntu.
https://bugs.launchpad.net/bugs/2064966

Title:
  "accept_source_route" enabled by default in 24.04

Status in systemd package in Ubuntu:
  Invalid

Bug description:
  Case 384821 -
  https://canonical.lightning.force.com/lightning/r/Case/500N100000BS4C3IAL/view

  Customer reported in 24.04 Noble that accept_source_route options in
  sysctl.conf are enabled by default. 22.04 Jammy ships with a
  50-sysctl.conf file which disables this by default. Previous releases
  ship with 99-sysctl.conf, but the line disabling this feature is
  commented out.

  In discussion on Mattermost (~Foundations,
  https://chat.canonical.com/canonical/pl/ytc1iyp6ai875pij3h7bzmeqoa) it
  was agreed that this option should be disabled by default and likely
  violates STIG.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/2064966/+subscriptions