From: james <james@e7ae566f-a301-0410-adde-c780ea21d3b5>
Date: Thu, 17 Jul 2008 20:47:12 +0000 (+0000)
Subject: Added warning when using chroot without specifying user and group.
X-Git-Tag: v2.1_rc9~23
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=31f90e641b16b8818ccb4fa6857ea236536575ea;p=thirdparty%2Fopenvpn.git

Added warning when using chroot without specifying user and group.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3069 e7ae566f-a301-0410-adde-c780ea21d3b5
---

diff --git a/init.c b/init.c
index 17c05bde4..05d8cd771 100644
--- a/init.c
+++ b/init.c
@@ -1912,6 +1912,9 @@ do_option_warnings (struct context *c)
      msg (M_WARN, "WARNING: you are using user/group/chroot without persist-key -- this may cause restarts to fail");
    }
 
+  if (o->chroot_dir && !(o->username && o->groupname))
+    msg (M_WARN, "WARNING: you are using chroot without specifying user and group -- this may cause the chroot jail to be insecure");
+
 #if P2MP
   if (o->pull && o->ifconfig_local && c->first_time)
     msg (M_WARN, "WARNING: using --pull/--client and --ifconfig together is probably not what you want");