On 21/11/17 13:20, Gert Doering wrote:
Hi,
On Tue, Nov 21, 2017 at 12:10:05PM +0000, fragmentux wrote:
Could this happen: --pull-filter ignore "echo disable-password-save" ..
Or is the string processed prior to the --pull-filter ?
A user who is able to modify his local config can do anything he
wants, including reading username+password from a clear text file.
So, while pull-filter will make openvpn ignore incoming "echo" statements,
it has no relevance to the password saving and "who decides?" discussion.
(A user who has *admin* rights could even install his own openvpn binary
which does whatever he wants)
Presume that the user does not have admin rights :
A non-admin user could copy the admin protected config file from
\program files\openvpn\config -to- \users\$user\openvpn\config and
modify it to include the --pull-filter.
Would running openvpn-GUI on the modified config negate the pushed echo?
(Note: this discussion is about the GUI and how it behaves, so there is
no service in use to block the secondary use of the GUI on the same config)
The commit message states:
Note: echo commands are processed as and when they are received and in
the order received.
With --pull-filter in place should that read *if* and when they are
received ?
Regards
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users
