Clarified --client-config-dir section on the man-page.

Signed-off-by: Samuli Seppänen <samuli@openvpn.net>
Acked-by: David Sommerseth <davids@redhat.com>
Signed-off-by: David Sommerseth <davids@redhat.com>

diff --git a/openvpn.8 b/openvpn.8
index 9639f755673574b13de667c1de0afceee5c066d5..182e5d52ab37d47556067fb6e94ff6d3f809fdf1 100644 (file)
--- a/openvpn.8
+++ b/openvpn.8
@@ -2895,7 +2895,9 @@ as the client's X509 common name.  If a matching file
 exists, it will be opened and parsed for client-specific
 configuration options.  If no matching file is found, OpenVPN
 will instead try to open and parse a default file called
-"DEFAULT", which may be provided but is not required.
+"DEFAULT", which may be provided but is not required. Note that
+the configuration files must be readable by the OpenVPN process
+after it has dropped it's root privileges.
 
 This file can specify a fixed IP address for a given
 client using