Re: [Openvpn-devel] mingw32-built openvpn-2.3-alpha1

2012-03-09 Thread Athanasios Douitsis
Hi, Thanks! Yes I know it's dead, but I thought that, since I did it I might take a minute to share my findings, just in case. Can't hurt I suppose!... I'll try the new build system as well. Many thanks, Athanasios On Fri, Mar 9, 2012 at 7:08 PM, Alon Bar-Lev wrote: > Hello, > > I am just in

Re: [Openvpn-devel] [Openvpn-users] OpenVPN 2.3-alpha1 released

2012-03-09 Thread Alon Bar-Lev
2012/3/9 Carsten Krüger : > Hello Heiko, > > HH> It is false that you cannot set a process' mandatory label to a higher > HH> integrity level than the one in the token. > > That's not what I said. > It's not possible to assign an higher level than the user have to a > users process. > > Users can h

Re: [Openvpn-devel] [Openvpn-users] OpenVPN 2.3-alpha1 released

2012-03-09 Thread Carsten Krüger
Hello Heiko, HH> It is false that you cannot set a process' mandatory label to a higher HH> integrity level than the one in the token. That's not what I said. It's not possible to assign an higher level than the user have to a users process. Users can have low and medium, administrators can have

Re: [Openvpn-devel] mingw32-built openvpn-2.3-alpha1

2012-03-09 Thread Alon Bar-Lev
Hello, I am just in the process of rewriting the openvpn build system. Some documentation is available[1]. In your case, as you build on Windows, cygwin environment is the appropriate environment. cygwin contains the new mingw toolchain from mingw-w64 (including 32bit). cygwin is maintain, whil

[Openvpn-devel] mingw32-built openvpn-2.3-alpha1

2012-03-09 Thread Athanasios Douitsis
Hi everyone, First of all, let me say that I am delighted to see 2.3 approaching final release. This is truly great. Just wanted to let you know that there may be some rough edges when trying to use the source tarball to compile openvpn using mingw32. I suppose nobody uses mingw anymore, so this

Re: [Openvpn-devel] [Openvpn-users] OpenVPN 2.3-alpha1 released

2012-03-09 Thread Fabian Knittel
Hi Heiko, Am 9. März 2012 14:42 schrieb Heiko Hund : > Instead I plan to secure the process (and the probably the pipe handle as > well) against malicious operations by not granting the user any sophisticated > access to it, i.e. you can only inject code if you can write the process' > memory. Thi

Re: [Openvpn-devel] [Openvpn-users] OpenVPN 2.3-alpha1 released

2012-03-09 Thread Heiko Hund
On Thursday 01 March 2012 12:11:37 Heiko Hund wrote: > On Thursday 01 March 2012 11:59:11 Carsten Krüger wrote: > > No. If you start a process in users context the user can modify it. > > There is nothing you could do against. > > I'll do some tests next week and post my findings here. Sorry, hav

Re: [Openvpn-devel] [PATCH 35/52] build: proper selinux detection and usage

2012-03-09 Thread Samuli Seppänen
Thanks for the clarification. ACK then. -- Samuli Seppänen Community Manager OpenVPN Technologies, Inc irc freenode net: mattock > I wrote this in the introduction of the patch set. > > There are two approaches to detecting dependencies: > > 1. Detect all compile time dependences- you detect h

Re: [Openvpn-devel] [PATCH 49/52] build: move wrappers into platform module

2012-03-09 Thread Samuli Seppänen
Thanks for the clarifications! I like the idea of moving some functionality into more general-purpose libraries whenever possible. Those libraries could then be - at least theoretically - used by other projects, so that the code gets more exposure and testing, as well as taking some of the maintena

Re: [Openvpn-devel] [PATCH 47/52] build: move inet_ntop(), inet_pton() emulation into compat

2012-03-09 Thread Samuli Seppänen
Ok. We need this for at least 2 years when XP has EOL and I think compat is the right place. ACK just as earlier :). -- Samuli Seppänen Community Manager OpenVPN Technologies, Inc irc freenode net: mattock > Not exactly... windows has this in Vista and above. > As long as we need to support X

Re: [Openvpn-devel] [PATCH 50/52] build: windows: install version.sh to allow installer read version

2012-03-09 Thread Samuli Seppänen
Ok. ACK. -- Samuli Seppänen Community Manager OpenVPN Technologies, Inc irc freenode net: mattock > Not exactly. > It is used[1] by the packaging script... just sourced to get some > environment variables. > > [1] https://github.com/alonbl/openvpn-build/blob/master/windows-nsis/build#L55 > > 2