]> git.ipfire.org Git - thirdparty/openvpn.git/commit
win: allow OpenVPN service account to use any command-line options lev/vsa
authorLev Stipakov <lev@openvpn.net>
Wed, 12 Mar 2025 11:35:56 +0000 (13:35 +0200)
committerLev Stipakov <lev@openvpn.net>
Wed, 12 Mar 2025 11:54:33 +0000 (13:54 +0200)
commitf89d00a3a89ca4a817b10bee92ae7fea184616ad
treecd8d4e7d21c0c9e06f1d90a964c2c9800166e4f8
parent99b35c3783477b837735cff0aa1cf7c5ba4aa366
win: allow OpenVPN service account to use any command-line options

Since 2.7, OpenVPN service (used to start persistent connections)
runs under limited virtual service account NT SERVICE\OpenVPNService.

Since it should be able to use all command-line options
and cannot be made member of "OpenVPN Administrators" group,
it has to be handled separately.

Change-Id: I44d308301dfb7c22600d8632a553288f52b3068f
Signed-off-by: Lev Stipakov <lev@openvpn.net>
src/openvpnserv/common.c
src/openvpnserv/interactive.c
src/openvpnserv/service.h
src/openvpnserv/validate.c
src/openvpnserv/validate.h