-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi,

the openvpn-server systemd unit file currently make use of PrivateTmp=True,
this denies the openvpn process access to /tmp (and /var/tmp).

This setting also does not provide the systemd assigned location for temporary
files to the openvpn process.

Thus the problem is two fold:
1.
It is not possible to pre-determine a temporary directory within the systemd
PrivateTmp assigned folder within an openvpn config which needs to use --tmp-dir
2.
Openvpn is forced to assign a non-standard temporary folder to --tmp-dir which
lies outside of the systemd assigned private temporary folder.

Not being familiar with lib-systemd, I do not know how to approach this problem,
the only "answer" I can see is something like an "alias" for systemd PrivateTmp.

EG:
To use --tmp-dir within an openvpn config that uses the systemd assign temporary
folder, the alias would be something like: 'tmp-dir systemd'

Otherwise, what is the recommended way to use --tmp-dir under systemd ?

Thanks
R
-----BEGIN PGP SIGNATURE-----
Version: ProtonMail

wsBzBAEBCAAGBQJg3PFrACEJEE+XnPZrkLidFiEECbw9RGejjXJ5xVVVT5ec
9muQuJ2uQwgAzLi4zvrOVV+N88FegTN6rzAT9/pvW/BDRSH5/SGISOlxs8sF
nxWtQyAq1qgokSK1LrIudge/43b4xB2q++hjeZ+U+e7nW2GvyLONwc/FL2IX
6lA6g1JLpQzhy+i4F4A6vFr2kdatPPy9LOFS5AZryvQXYFcF8+5vWmaWav4j
mJ1IBgxwBEQSRglhlKaKwWNqOfVNfKBCpRq54a9EikQSoZbs5SADxp4d5VVE
UbNnf3jkIXRgCsWPVzbP3llwiCwhnyQtN6MhwkRIUk3Q8iZifWzmu2ETMX4q
wVB17Kc0WrDrd4lAmMl8wiKxRoZRYZf+8eG1yAWDIkbVdGjfCWLoew==
=I4w+
-----END PGP SIGNATURE-----

Attachment: publickey - tincantech@protonmail.com - 0x09BC3D44.asc
Description: application/pgp-keys

Attachment: publickey - tincantech@protonmail.com - 0x09BC3D44.asc.sig
Description: PGP signature

_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Reply via email to