Package: openvpn Version: 2.3.10-1 Severity: normal Dear Maintainer,
the systemd unit of openvpn 2.3.10-1 in stretch prevents the use of network namespaces in route-up scripts, as this requires the CAP_SYS_ADMIN to be able to call setns(2). Unfortunately the log output is not very verbose and only reports the generic failure when executing the route-up script. > WARNING: Failed running command (--route-up): external program exited with > error status: 1 This is a regression, when upgrading from jessie. Best regards, hexa- -- System Information: Debian Release: stretch/sid APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 4.5.0-1-amd64 (SMP w/2 CPU cores) Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages openvpn depends on: ii debconf [debconf-2.0] 1.5.59 ii init-system-helpers 1.31 ii initscripts 2.88dsf-59.3 ii iproute2 4.3.0-1+b1 ii libc6 2.22-7 ii liblzo2-2 2.08-1.2 ii libpam0g 1.1.8-3.2 ii libpkcs11-helper1 1.11-5 ii libssl1.0.2 1.0.2g-2 ii libsystemd0 229-5 Versions of packages openvpn recommends: pn easy-rsa <none> Versions of packages openvpn suggests: ii openssl 1.0.2g-2 pn resolvconf <none> -- debconf information: openvpn/create_tun: false