]> git.ipfire.org Git - thirdparty/openvpn.git/commit
win: allow OpenVPN service account to use any command-line options
authorLev Stipakov <lev@openvpn.net>
Tue, 15 Apr 2025 15:51:24 +0000 (17:51 +0200)
committerGert Doering <gert@greenie.muc.de>
Tue, 15 Apr 2025 18:14:59 +0000 (20:14 +0200)
commit7846055717d138e6b1130cec67412acf127e9b78
tree855b8aec4af83dc07d590ad1a1fe0ed63e2f5f8a
parent78d0c15f48388c0d2376c12be47b0f8be98fac55
win: allow OpenVPN service account to use any command-line options

Since 2.7, OpenVPN service (used to start persistent connections)
runs under limited virtual service account NT SERVICE\OpenVPNService.

Since it should be able to use all command-line options
and cannot be made member of "OpenVPN Administrators" group,
it has to be handled separately.

Change-Id: I44d308301dfb7c22600d8632a553288f52b3068f
Signed-off-by: Lev Stipakov <lev@openvpn.net>
Acked-by: Gert Doering <gert@greenie.muc.de>
Message-Id: <20250415155131.12458-1-gert@greenie.muc.de>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg31435.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
src/openvpnserv/common.c
src/openvpnserv/interactive.c
src/openvpnserv/service.h
src/openvpnserv/validate.c
src/openvpnserv/validate.h