Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: network-manager-openvpn (Ubuntu)
Status: New = Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
I noticed this today and I'm astounded this reported bug from 2008 still
exists this day. It's good decency and a good security practice for a
program to drop root privileges after it's no longer needed, I can't
understand why network manager does not enable openvpn to do this.
And no you don't
With network-manager-openvpn, the process is launched with the current
user, not root powered. I'm nut sure I see the point of wanting to have
yet another user just for this.
--
network-manager-openvpn does not allow you to make openvpn drop privileges
https://bugs.launchpad.net/bugs/295691
You
A further enhancement could be the creation of such a user if they don't
exist when the package is installed. After all having user and group
openvpn is preferable to simply nobody for logs etc. Perhaps the
privilege drop could be incorporated by default?
Il
--
network-manager-openvpn does not
