This is part of a series of changes to make the "non-interactive OpenVPN service" run itself + openvpn.exec without SYSTEM privileges, using the iservice. This service needs more privileges than "joe random user", especially "run config files from non-default directories", and we can't add the service user to the "OpenVPN Administrators" group -> so add privileges for "the service user", as if part of that group (config files, and command line options).
Stared hard at the code, and tested building. Not actually tested the resulting binaries. Your patch has been applied to the master branch. commit 7846055717d138e6b1130cec67412acf127e9b78 Author: Lev Stipakov Date: Tue Apr 15 17:51:24 2025 +0200 win: allow OpenVPN service account to use any command-line options Signed-off-by: Lev Stipakov <l...@openvpn.net> Acked-by: Gert Doering <g...@greenie.muc.de> Message-Id: <20250415155131.12458-1-g...@greenie.muc.de> URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg31435.html Signed-off-by: Gert Doering <g...@greenie.muc.de> -- kind regards, Gert Doering _______________________________________________ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel