On Tuesday 28 February 2012 18:38:57 Alon Bar-Lev wrote:
> > Even though, the new communication pipe between the "helper service" and
> > openvpn.exe  might gain more features with time, which might cover much
> > of what the management interface provides today too.  But we're _not_
> > trying to kill the management interface.
> 
> There is no need for the helper service.
> Nobody care if the openvpn daemon is running in privilege mode.
> The problem is the user interaction.
> So I would have avoided to invest resources at the daemon side and invest
> resources at proper UI.

The idea to have the service do the privileged operations instead of just 
starting openvpn as "Local System" (or whatever) came from the fear of 
privilege escalation in the scripts that are run by openvpn. So, at least I 
care that it's not running in privilege mode. Your point is invalid. =P

Heiko
-- 
Heiko Hund | Software Engineer | Phone +49-721-25516-237 | Fax -200
Astaro a Sophos Company | Amalienbadstr. 41 Bau 52 | 76227 Karlsruhe | Germany
Commercial Register: Mannheim HRA 702710 | Headquarter Location: Karlsruhe
 
Represented by the General Partner Astaro Verwaltungs GmbH
Amalienbadstraße 41 Bau 52 | 76227 Karlsruhe | Germany 
Commercial Register: Mannheim HRB 708248 | Executive Board: Gert Hansen,
Markus Hennig, Jan Hichert, Günter Junk, Dr. Frank Nellissen


Reply via email to