On Tuesday 20 October 2015 22:12:06 Selva Nair wrote: > The interactive service (based on a quick scan through the code) looks to > be very useful on a desktop with a single user, allowing the GUI and openvpn > to run with user privileges. I hope the "windows team" would soon start > working on making the GUI to work with this new service :)
See, that's the current problem with the OpenVPN Windows things. Too many people relying on other - non existing - people to do the work. That's why we did not really get anywhere with the interactive service. > But a sever admin would not want it in the system as it can allow any user > with some VPN server account to change the routes etc using the > service..(please correct me if I'm mistaken). If you do not make the configuration directory writable to anyone, then you're fine. IIRC the GUI has an command line option that would need to be changed in order to disable loading of arbitrary configs. Besides that the concept is waterproof. Heiko Sophos Technology GmbH, Amalienbadstraẞe 41/Bau 52, D-76227 Karlsruhe, Deutschland Tel +49 (0)721 25516 0 Fax +49 (0)721 25516 200 E-Mail i...@sophos.de www.sophos.de Sitz der Gesellschaft: Karlsruhe, Amtsgericht Mannheim HRB 712658 Geschäftsführer: Nicholas Bray, Pino von Kienlin, Wolfgang Hilpert, Jennifer Onslow. Sophos GmbH, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Deutschland Tel +49 (0) 611 5858-0 Fax +49 (0) 611 5858-1042 E-Mail i...@sophos.de www.sophos.de Sitz der Gesellschaft: Wiesbaden, Amtsgericht Wiesbaden HRB 25915 Geschäftsführer: Nicholas Bray, Wolfgang Hilpert, Pino von Kienlin, Jennifer Onslow
