Hi, On Fri, Nov 13, 2015 at 10:34:49AM -0500, Selva Nair wrote: > On Fri, Nov 13, 2015 at 10:27 AM, Gert Doering <g...@greenie.muc.de> wrote: > >> However, if the user specifies --win-sys some_cruft, win_sys_path will > >> get set to that "some_cruft" (in options.c). User is the king. > > > > Yes. In this case, I do not worry at all - "you get what you ask for". > > In the current setup its perfectly fine. But I am adding it to my list > of genies when the privilege separation aka iService can is > opened...:)
That *should* actually still be a non-issue, as openvpn.exe is run with
the privileges of the requesting user (and the route handling is requested
via service pipe from the iService). Unlike today, where openvpn.exe has
to run with admin privileges.
But of course there will be surprises in the details.
gert
--
USENET is *not* the non-clickable part of WWW!
//www.muc.de/~gert/
Gert Doering - Munich, Germany g...@greenie.muc.de
fax: +49-89-35655025 g...@net.informatik.tu-muenchen.de
signature.asc
Description: PGP signature
