Hi, On Tue, Nov 21, 2017 at 12:10:05PM +0000, fragmentux wrote: > Could this happen: --pull-filter ignore "echo disable-password-save" .. > > Or is the string processed prior to the --pull-filter ?
A user who is able to modify his local config can do anything he wants, including reading username+password from a clear text file. So, while pull-filter will make openvpn ignore incoming "echo" statements, it has no relevance to the password saving and "who decides?" discussion. (A user who has *admin* rights could even install his own openvpn binary which does whatever he wants) gert -- now what should I write here... Gert Doering - Munich, Germany g...@greenie.muc.de
signature.asc
Description: PGP signature
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users