On Thu, Feb 11, 2016 at 09:59:53AM +0100, Gert Doering wrote:
> Hi,
>
> On Thu, Feb 11, 2016 at 10:28:42AM +0200, Pasi Kärkkäinen wrote:
> > Do you know if it's now possible to have also the OpenVPN config files and
> > certs in user's profile directory
> > (not on system-wide c:\windows\program files\openvpn\config\) ?
>
> The intention is to make this configurable at installation time ("only
> admin-provided openvpn profiles" vs. "user-installable profiles").
>
> Details to be solved.
>
> (Background: if you permit user configs for unprivileged users, you permit
> unprivileged users to mess with routing, and potentially "steal traffic"
> by redirecting traffic into a malicious VPN server - so this needs to be
> a conscious decision by the admin at installation time)
>
Yeah, makes sense. Thanks for the update.
> gert
>
-- Pasi
