Package: openvpn
Version: 2.3.10-1
Severity: normal

Dear Maintainer,

the systemd unit of openvpn 2.3.10-1 in stretch prevents the use of network 
namespaces
in route-up scripts, as this requires the CAP_SYS_ADMIN to be able to call 
setns(2).

Unfortunately the log output is not very verbose and only reports the generic 
failure when
executing the route-up script.

> WARNING: Failed running command (--route-up): external program exited with 
> error status: 1

This is a regression, when upgrading from jessie.


Best regards,

hexa-

-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 4.5.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages openvpn depends on:
ii  debconf [debconf-2.0]  1.5.59
ii  init-system-helpers    1.31
ii  initscripts            2.88dsf-59.3
ii  iproute2               4.3.0-1+b1
ii  libc6                  2.22-7
ii  liblzo2-2              2.08-1.2
ii  libpam0g               1.1.8-3.2
ii  libpkcs11-helper1      1.11-5
ii  libssl1.0.2            1.0.2g-2
ii  libsystemd0            229-5

Versions of packages openvpn recommends:
pn  easy-rsa  <none>

Versions of packages openvpn suggests:
ii  openssl     1.0.2g-2
pn  resolvconf  <none>

-- debconf information:
  openvpn/create_tun: false

Reply via email to