Thanks.  I have not tested this beyond "stare at code", but this is
easy enough (and I have verified the counterpart in openvpn/options.c,
which does a streq() with "stdin", so it needs to be an exact match,
not a substring or anything else).

Your patch has been applied to the master and release/2.6 branch (bugfix).

commit a3d8c40260930ab82ca5d9d71796a7763e74a03d (master)
commit a7f5f570bfe30b86b5c7088450f96b77c86dca18 (release/2.6)
Author: Selva Nair
Date:   Mon Nov 3 15:59:56 2025 +0100

     openvpnserv: Disallow stdin as config unless user is authorized

     Signed-off-by: Selva Nair <[email protected]>
     Acked-by: Gert Doering <[email protected]>
     Gerrit URL: https://gerrit.openvpn.net/c/openvpn/+/1343
     Message-Id: <[email protected]>
     URL: 
https://www.mail-archive.com/[email protected]/msg34156.html
     Signed-off-by: Gert Doering <[email protected]>


--
kind regards,

Gert Doering



_______________________________________________
Openvpn-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Reply via email to