openvpn/plugin/down-root
james 6fbf66fad3 This is the start of the BETA21 branch.
It includes the --topology feature, and
TAP-Win32 driver changes to allow
non-admin access.



git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@580 e7ae566f-a301-0410-adde-c780ea21d3b5
2005-09-26 05:28:27 +00:00
..
down-root.c This is the start of the BETA21 branch. 2005-09-26 05:28:27 +00:00
Makefile This is the start of the BETA21 branch. 2005-09-26 05:28:27 +00:00
README This is the start of the BETA21 branch. 2005-09-26 05:28:27 +00:00

down-root -- an OpenVPN Plugin Module

SYNOPSIS

The down-root module allows an OpenVPN configuration to
call a down script with root privileges, even when privileges
have been dropped using --user/--group/--chroot.

This module uses a split privilege execution model which will
fork() before OpenVPN drops root privileges, at the point where
the --up script is usually called.  The module will then remain
in a wait state until it receives a message from OpenVPN via
pipe to execute the down script.  Thus, the down script will be
run in the same execution environment as the up script.

BUILD

Build this module with the "make" command.  The plugin
module will be named openvpn-down-root.so

USAGE

To use this module, add to your OpenVPN config file:

  plugin openvpn-down-root.so "command ..."

CAVEATS

This module will only work on *nix systems, not Windows.