This is part of a series of changes to make the "non-interactive
OpenVPN service" run itself + openvpn.exec without SYSTEM privileges,
using the iservice.  This service needs more privileges than "joe random
user", especially "run config files from non-default directories", and
we can't add the service user to the "OpenVPN Administrators" group 
-> so add privileges for "the service user", as if part of that group
(config files, and command line options).

Stared hard at the code, and tested building.  Not actually tested
the resulting binaries.

Your patch has been applied to the master branch.

commit 7846055717d138e6b1130cec67412acf127e9b78
Author: Lev Stipakov
Date:   Tue Apr 15 17:51:24 2025 +0200

     win: allow OpenVPN service account to use any command-line options

     Signed-off-by: Lev Stipakov <l...@openvpn.net>
     Acked-by: Gert Doering <g...@greenie.muc.de>
     Message-Id: <20250415155131.12458-1-g...@greenie.muc.de>
     URL: 
https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg31435.html
     Signed-off-by: Gert Doering <g...@greenie.muc.de>


--
kind regards,

Gert Doering



_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Reply via email to