2012/2/29 Gert Doering <g...@greenie.muc.de>: > Hi, > > On Wed, Feb 29, 2012 at 07:43:18PM +0100, Carsten Krüger wrote: >> > Part of the assumption here is "the user controls the openvpn config", >> > and as such, he can make openvpn.exe run arbitrary scripts anyway - and >> > to stop this from being a problem, just run openvpn.exe with your uid. >> >> What operation could be in script that is usefull when it's executed >> in user context. >> >> I never used script with openvpn. I've no idea which are real world >> applications for it. > > Scripts are for creative uses that the programmers of openvpn have not > foreseen. Like "after the VPN is up, auto-sync all your git repositories" > or "open up a few xterms with ssh's to $internalhosts". > > David had some other idea recently, which I forgot.
This is a great example why this functionality should *MOVE OUT* of the openvpn code base. The UI can monitor OpenVPN and run scripts when such events are detected via the management interface. The UI already runs in the context of the interactive user. I would like to receive replies to[1]. Thanks, Alon. [1] http://sourceforge.net/mailarchive/message.php?msg_id=28910374
