Re: [Openvpn-devel] [PATCH 1/3] Do not pass env for system commands on Linux

2016-08-08 Thread David Sommerseth
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/08/16 13:44, ValdikSS wrote: > It's possible to have so much routes that they won't fit into stack > and execve would fail with E2BIG (Argument list too long). > > This commit fixes this issue by not adding route information into > execve'd app

[Openvpn-devel] Is --ifconfig-ipv6-noexec planned ?

2016-08-08 Thread debbie10t
Hi, --ifconfig-ipv6-noexec not sure if this would be a 'feature request/wish list' item or if it has just been over looked. I did have an annoying use case but I reconfigured so as not to need it, but I feel like there would be cases for it. thanks

Re: [Openvpn-devel] Is --ifconfig-ipv6-noexec planned ?

2016-08-08 Thread Gert Doering
Hi, On Mon, Aug 08, 2016 at 01:05:06PM +0100, debbie10t wrote: > --ifconfig-ipv6-noexec > > not sure if this would be a 'feature request/wish list' item > or if it has just been over looked. > > I did have an annoying use case but I reconfigured so as not > to need it, but I feel like there woul

Re: [Openvpn-devel] Is --ifconfig-ipv6-noexec planned ?

2016-08-08 Thread debbie10t
On 08/08/16 13:20, Gert Doering wrote: Hi, On Mon, Aug 08, 2016 at 01:05:06PM +0100, debbie10t wrote: --ifconfig-ipv6-noexec not sure if this would be a 'feature request/wish list' item or if it has just been over looked. I did have an annoying use case but I reconfigured so as not to need

[Openvpn-devel] [PATCH v4 1/4] Rework the user input interface to make it more modular

2016-08-08 Thread David Sommerseth
This is will provide an interface for other mechanisms to be used to query the user for information, such as usernames, passwords, etc. It has also been a goal to make it possible to query for all the information in one call and not do it sequencially as before. [v4 - add a simple wrapper combin

[Openvpn-devel] [PATCH v4 0/4] Query User Input patches

2016-08-08 Thread David Sommerseth
Lets see if fourth time is the charm. This patch set reworks the whole interface of quering the user for input. This will be the building block for enabling OpenVPN to gather as much information as possible at the initalization point, as well as providing an API for other more advanced mechanism

[Openvpn-devel] [PATCH v4 2/4] Re-implement the systemd support using the new query user API

2016-08-08 Thread David Sommerseth
This provides exactly the same systemd functionality which existed before the query user infrastructure got implemented. [v4 - change disapproved &= syntax ] [v3 - Remove QUERY_USER_EXEC_ALTERNATIVE macro, simplify alternatives definition directly in console.h. For now only d

[Openvpn-devel] [PATCH v4 3/4] autotools: Add support for extracting version information from pkg-config modules

2016-08-08 Thread David Sommerseth
This patch adds extracting the pkg-config --modversion output into a variable configure.ac can consume. The extracted content is put into ${pkgname}_MODVERSION. See config.log for details after ./configure have run. The patch also modifies slightly how the pkg-config result is processed. Pkg-co

[Openvpn-devel] [PATCH v4 4/4] systemd: Do not mask usernames when querying for it via systemd-ask-password

2016-08-08 Thread David Sommerseth
In systemd after version 216, systemd-ask-password will support --echo which will avoid masking the user input. As OpenVPN uses this mechanism collecting usernames when systemd is available, this will avoid the input of usernames to be masked. This patch also adds the --icon argument, which is ai