Re: [Openvpn-devel] [PATCH] Better error message when script fails due to script-security setting

2019-02-18 Thread Selva Nair
Hi On Mon, Feb 18, 2019 at 9:24 AM Gert Doering wrote: > Hi, > > On Sat, Feb 16, 2019 at 08:55:41PM -0500, selva.n...@gmail.com wrote: > > From: Selva Nair > > > > - Add a new return value (-2) for openvpn_execve() when external > > program execution is not allowed due to a low script-security

[Openvpn-devel] [PATCH] Do not set pkcs11-helper "safe fork mode"

2019-02-18 Thread Hilko Bengen
>From the pkcs11-helper API documentation about pkcs11h_setForkMode(): > This funciton is releavant if PKCS11H_FEATURE_MASK_THREADING is > set. If safe mode is on, the child process can use the loaded > PKCS#11 providers but it cannot use fork(), while it is in one of > the hooks functions, since

Re: [Openvpn-devel] [PATCH] Better error message when script fails due to script-security setting

2019-02-18 Thread Gert Doering
Hi, On Sat, Feb 16, 2019 at 08:55:41PM -0500, selva.n...@gmail.com wrote: > From: Selva Nair > > - Add a new return value (-2) for openvpn_execve() when external > program execution is not allowed due to a low script-security > setting. > > - Add a corresponding error message I find this a