Control: tags -1 + upstream Hi,
> This bug hit me pretty hard. I unknowingly used the upstream > openvpn-server@ unit, and then spent a day or so trying to work out why > it did not work – the upstream one has CAP_AUDIT_WRITE missing from its > capability list. > > Perhaps the upstream one could be patched to include this capability? Thanks for your report. Unfortunately I'm a total DAC illiterate, can anyone explain the difference between Upstream: CAP_DAC_OVERRIDE Debian: CAP_DAC_READ_SEARCH CAP_AUDIT_WRITE and what they actually mean? What is allowed by the Debian unit that is not allowed by the Upstream unit, and when would you need this? Can you file an upstream bug about this? https://community.openvpn.net/openvpn/report I was actually looking into changing the Debian unit to be like the upstream unit. Regards, Bernhard
