Yes in that case "CAP_AUDIT_WRITE" is what I'd add back then - especially for an SRU minimal reasonable changes are required.
Thanks for working with me to sort this out (again since https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=868806 is the same) I beg your pardon, but let me open an Upstream discussion to agree on this move to avoid even more confusion. Actually lets jump onto the existing bug, I did so at [1]. Upstream bug: https://community.openvpn.net/openvpn/ticket/918 Debian Bug: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=868806 [1]: https://community.openvpn.net/openvpn/ticket/918#comment:5 ** Bug watch added: Debian Bug tracker #868806 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=868806 ** Also affects: openvpn (Debian) via https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=868806 Importance: Unknown Status: Unknown ** Also affects: openvpn via https://community.openvpn.net/openvpn/ticket/918 Importance: Unknown Status: Unknown -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1787208 Title: Openvpn routing issue To manage notifications about this bug go to: https://bugs.launchpad.net/openvpn/+bug/1787208/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs