Message-ID: <534AAAEC.7050105@...1227...> Date: Sun, 13 Apr 2014 17:19:08 +0200 From: Arne Schwabe MIME-Version: 1.0 References: <1397366216-657-1-git-send-email-cernekee@...277...> <20140413104705.GL16637@...1296...> In-Reply-To: Subject: Re: [Openvpn-devel] [PATCH 0/3] Support non-root operation using ocproxy List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit To: Kevin Cernekee , Gert Doering Cc: openvpn-devel@lists.sourceforge.net On 13.04.2014 16:39, Kevin Cernekee wrote: > On Sun, Apr 13, 2014 at 3:47 AM, Gert Doering wrote: >> I think the goal can in most cases be achieved using SSH port forwarding - >> or OpenConnect, or a myriad of other "tunnel this file descriptor for me" >> tools. OpenVPN will do tun/tap, and do that well. > The problem with all of these alternatives (at least in my case) is > that the other end is already running OpenVPN, not one of the other > tools. Right now, there aren't a lot of good ways to connect to > somebody's OpenVPN service without running as root. Prior to this > work I had been using separate VMs. > > Are there any changes you could suggest that would make this feature > more palatable? > > You could look at the TARGET_ANDROID. That uses the management interface and fds over unix socket to achieve something similar. Arne