Improve usability of non-privileged operation
Get series with b4
b4 am [email protected]...Versions newest first
- v1 Latest2 patches 3 repliesIn review
Patches in v1 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/2 | Use provided env vars in up/down script.contrib/ contrib/ | +3 | 1 reply | |
| 2/2 | Document down-root plugin usage in client.downcontrib/ | +4 | 1 reply |
Reviews trailers per patch
No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.
Cover letter [Openvpn-devel] [PATCH 0/2] Improve usability of non-privileged operation
Ohai!
I recently undertook the project of not having my VPN client run as root anymore. I noticed there are a lot of questions about this on the internet, and I think one reason that this is more difficult then necessary is that the "official" client.down script doesn't work when used in the conjunction with the down-root plugin.
I noticed that both the up and the down script get a lot of information through environment variables, and the up script relies on that already anyways. So I figured doing the same in the down script would be a reasonable thing to do (it's also what the most commonly referred to external up/down scripts do).
With this change, the down script can actually be used with the down-root plugin just like this:
plugin openvpn-plugin-down-root.so "/etc/openvpn/client.down"
Hope this makes sense,
Conrad
Conrad Hoffmann (2):
Use provided env vars in up/down script.
Document down-root plugin usage in client.down
contrib/pull-resolv-conf/client.down | 6 +++++- contrib/pull-resolv-conf/client.up | 4 ++-- 2 files changed, 7 insertions(+), 3 deletions(-)
Signature · 1 line
2.13.3