On Mon, Feb 10, 2014 at 12:31 PM, Jan Just Keijser <[email protected]> wrote: > (...) > oh but Linux is one of the best networking OSes; the issue you are running > into has little to do with the network part of the OS , but with the user > separation part. On Linux a "normal" user is not allowed to touch network > settings (which is a good thing, from a security point of view). So in order > to start a VPN tunnel of any kind a switch to a superuser (or root) is > needed; there are several ways to achieve this: > - use 'sudo' > - use 'su' > - use an intermediary tool like NetworkManager
Neither 'sudo' nor 'su' is the solution to this problem as they do not solve the problem of coordinating access to shared repository (db) of DNS information which is resolv.conf file. Some kind of intermediary tool (or would I rather say system API) is needed indeed. The problem I have with NM is that it's specific to Gnome and it's not a universal tool which could be used regardless of desktop environment. Is this really the case that users are left on their own with no _proper_ support from Linux system in this regard? > Yes, NM is not perfect and yes, you cannot use all features of OpenVPN via > NM (esp automatic recovery and multiple tunnels, IIRC), but it *is* an easy > tool for end-users to be able to start and stop a VPN tunnel. > Any other way of achieving the same purposes requires a switch to a > super-user - which tool would you like to use for this? Something like resolvconf or openresolv which were created just to solve this problem. But I'd like this tool to be "official" in the sense that it's being universally recognized as the right way to manage resolv.conf. If this were the case then OpenVPN and other projects would come with scripts making use of this tool. > Also, if you're using security measures in OpenVPN like 'user nobody' then > you'd still be out of luck with the /etc/resolv.conf issue - which > application would you like to have full control over this file? With NM, > it's, well, NM. Again, something like resolvconf or openresolv which were created just to solve this problem. This way NM and any other tool could use this standard tool to update system-wide DNS information. Regards, Piotr ------------------------------------------------------------------------------ Android apps run on BlackBerry 10 Introducing the new BlackBerry 10.2.1 Runtime for Android apps. Now with support for Jelly Bean, Bluetooth, Mapview and more. Get your Android app in front of a whole new audience. Start now. http://pubads.g.doubleclick.net/gampad/clk?id=124407151&iu=/4140/ostg.clktrk _______________________________________________ Openvpn-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openvpn-users
