Ohai! I recently undertook the project of not having my VPN client run as root anymore. I noticed there are a lot of questions about this on the internet, and I think one reason that this is more difficult then necessary is that the "official" client.down script doesn't work when used in the conjunction with the down-root plugin.
I noticed that both the up and the down script get a lot of information through environment variables, and the up script relies on that already anyways. So I figured doing the same in the down script would be a reasonable thing to do (it's also what the most commonly referred to external up/down scripts do). With this change, the down script can actually be used with the down-root plugin just like this: plugin openvpn-plugin-down-root.so "/etc/openvpn/client.down" Hope this makes sense, Conrad Conrad Hoffmann (2): Use provided env vars in up/down script. Document down-root plugin usage in client.down contrib/pull-resolv-conf/client.down | 6 +++++- contrib/pull-resolv-conf/client.up | 4 ++-- 2 files changed, 7 insertions(+), 3 deletions(-) -- 2.13.3 ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel
