Re: [Openvpn-devel] [PATCH 1/1] add more security features for systemd units

2016-12-12 Thread Arne Schwabe
>> >> (I do not think an openvpn *client* config will need a to create >> files, but this needs testing) >> No, it does not. You compile with CLIENT_ONLY the tmp-dir option will throw an error. Arne -- Check out the

Re: [Openvpn-devel] [PATCH] Make --enable-async-push depend on --enable-plugins

2016-12-12 Thread David Sommerseth
On 12/12/16 12:47, Lev Stipakov wrote: > Async push functionality makes sense only with deferred authentication, > which requires plugins. > > Trac #783 > > Signed-off-by: Lev Stipakov > --- > configure.ac | 4 > 1 file changed, 4 insertions(+) > > diff --git

Re: [Openvpn-devel] [PATCH 1/1] add more security features for systemd units

2016-12-12 Thread David Sommerseth
On 12/12/16 20:44, Gert Doering wrote: > Hi, > > On Fri, Dec 09, 2016 at 07:13:03PM +0100, Christian Hesse wrote: >> From: Christian Hesse >> >> ProtectSystem=strict mounts the entire file system hierarchy read-only, >> except for the API file system subtrees /dev, /proc and /sys

Re: [Openvpn-devel] [PATCH 1/1] add more security features for systemd units

2016-12-12 Thread SviMik
> Hi, > > On Fri, Dec 09, 2016 at 07:13:03PM +0100, Christian Hesse wrote: > > From: Christian Hesse > > > > ProtectSystem=strict mounts the entire file system hierarchy read-only, > > except for the API file system subtrees /dev, /proc and /sys (which can > > be protected using

Re: [Openvpn-devel] On saving passwords

2016-12-12 Thread Илья Шипицин
2016-12-12 13:09 GMT+05:00 Samuli Seppänen : > Il 11/12/2016 19:52, Selva Nair ha scritto: > > > > On Sun, Dec 11, 2016 at 12:00 PM, debbie10t > > wrote: > > > > What happens if a remote user, who has admin access to their

Re: [Openvpn-devel] openvpn windows feed ?

2016-12-12 Thread Samuli Seppänen
Il 11/12/2016 20:44, Илья Шипицин ha scritto: > Hello, > > as we release new versions of openvpn installer, there are at least two > "channels" > > a) beta > b) stable > > should we also host some rss/atom feed with the most recent versions of > 2 channels ? > > so, that openvpn-gui could check

Re: [Openvpn-devel] combined ndis5 + ndis6 installer ?

2016-12-12 Thread Samuli Seppänen
Il 12/12/2016 08:22, Илья Шипицин ha scritto: > > > 2016-12-02 11:55 GMT+05:00 Samuli Seppänen >: > > Il 02/12/2016 05:54, Илья Шипицин ha scritto: > > unicode nsis is different from ansi nsis. for example, nsProcess > needs >

Re: [Openvpn-devel] On saving passwords

2016-12-12 Thread Samuli Seppänen
Il 11/12/2016 19:52, Selva Nair ha scritto: > > On Sun, Dec 11, 2016 at 12:00 PM, debbie10t > wrote: > > What happens if a remote user, who has admin access to their own > computer, connects to a work VPN but they decide to change said

Re: [Openvpn-devel] combined ndis5 + ndis6 installer ?

2016-12-12 Thread Samuli Seppänen
Il 12/12/2016 11:45, Илья Шипицин ha scritto: > > I investigated Fedora (we use CentOS/Fedora) and Debian world. > as for Fedora, it is far from being ready (I'll take care of that) > > as for Debian, there's > http://deb.debian.org/debian/pool/main/n/nsis/ >

[Openvpn-devel] [PATCH] Make --enable-async-push depend on --enable-plugins

2016-12-12 Thread Lev Stipakov
Async push functionality makes sense only with deferred authentication, which requires plugins. Trac #783 Signed-off-by: Lev Stipakov --- configure.ac | 4 1 file changed, 4 insertions(+) diff --git a/configure.ac b/configure.ac index 27bdcc3..946f3db 100644 ---

Re: [Openvpn-devel] openvpn windows feed ?

2016-12-12 Thread Gert Doering
Hi, On Sun, Dec 11, 2016 at 11:44:24PM +0500, ?? wrote: > as we release new versions of openvpn installer, there are at least two > "channels" > > a) beta > b) stable > > should we also host some rss/atom feed with the most recent versions of 2 > channels ? > > so, that

Re: [Openvpn-devel] openvpn windows feed ?

2016-12-12 Thread Илья Шипицин
2016-12-12 14:22 GMT+05:00 Samuli Seppänen : > Il 11/12/2016 20:44, Илья Шипицин ha scritto: > >> Hello, >> >> as we release new versions of openvpn installer, there are at least two >> "channels" >> >> a) beta >> b) stable >> >> should we also host some rss/atom feed with the

Re: [Openvpn-devel] combined ndis5 + ndis6 installer ?

2016-12-12 Thread Илья Шипицин
2016-12-12 13:46 GMT+05:00 Samuli Seppänen : > Il 12/12/2016 08:22, Илья Шипицин ha scritto: > >> >> >> 2016-12-02 11:55 GMT+05:00 Samuli Seppänen > >: >> >> Il 02/12/2016 05:54, Илья Шипицин ha scritto: >> >> unicode

Re: [Openvpn-devel] On saving passwords

2016-12-12 Thread Selva Nair
On Mon, Dec 12, 2016 at 3:09 AM, Samuli Seppänen wrote: > Il 11/12/2016 19:52, Selva Nair ha scritto: > >> >> On Sun, Dec 11, 2016 at 12:00 PM, debbie10t > > wrote: >> >> What happens if a remote user, who has admin access

Re: [Openvpn-devel] [PATCH 1/1] add more security features for systemd units

2016-12-12 Thread Gert Doering
Hi, On Fri, Dec 09, 2016 at 07:13:03PM +0100, Christian Hesse wrote: > From: Christian Hesse > > ProtectSystem=strict mounts the entire file system hierarchy read-only, > except for the API file system subtrees /dev, /proc and /sys (which can > be protected using PrivateDevices=,