Hi, On Tue, Oct 21, 2014 at 09:55:09AM -0400, Selva Nair wrote: > Currently OpneVPN-MI-GUI does work without elevated privileges using > openvpn service and the management interface. I have a small user-base who > have been happily using it this way for more than a year now. In my view if > OpenVPN distribution could bundle the MI-GUI, it would be of great help.
Well, that works, but runs OpenVPN as privileged user - so a bug in OpenVPN (or a config that runs scripts) could be used to attack the system... (Plus, traditionally using the service will not work with username+password input, but if MI does that via management interface, it can be done) gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025 g...@net.informatik.tu-muenchen.de
pgpfUIEEYKJY2.pgp
Description: PGP signature