Hi,

On 29/03/2022 12:48, Gert Doering wrote:
@Antonio: can we make DCO interfaces auto-disappear if the OpenVPN
process closes the last FD?

Originally we did not want to do that because we wanted ovpn-dco to survive a userspace crash or reload/restart (more likely) without losing state or client connections. Not something that can work now, but we wanted to be able to get there.

This said, as highlighted by Timo, the NET_ADMIN capa is required anyway for other operations (openvpn talks to DCO via netlink API).

Cheers,

--
Antonio Quartulli


_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Reply via email to