On Tuesday 28 February 2012 18:38:57 Alon Bar-Lev wrote: > > Even though, the new communication pipe between the "helper service" and > > openvpn.exe might gain more features with time, which might cover much > > of what the management interface provides today too. But we're _not_ > > trying to kill the management interface. > > There is no need for the helper service. > Nobody care if the openvpn daemon is running in privilege mode. > The problem is the user interaction. > So I would have avoided to invest resources at the daemon side and invest > resources at proper UI.
The idea to have the service do the privileged operations instead of just starting openvpn as "Local System" (or whatever) came from the fear of privilege escalation in the scripts that are run by openvpn. So, at least I care that it's not running in privilege mode. Your point is invalid. =P Heiko -- Heiko Hund | Software Engineer | Phone +49-721-25516-237 | Fax -200 Astaro a Sophos Company | Amalienbadstr. 41 Bau 52 | 76227 Karlsruhe | Germany Commercial Register: Mannheim HRA 702710 | Headquarter Location: Karlsruhe Represented by the General Partner Astaro Verwaltungs GmbH Amalienbadstraße 41 Bau 52 | 76227 Karlsruhe | Germany Commercial Register: Mannheim HRB 708248 | Executive Board: Gert Hansen, Markus Hennig, Jan Hichert, Günter Junk, Dr. Frank Nellissen