Bug 120425

Summary:	openvpn user for running the openvpn process
Product:	Gentoo Linux	Reporter:	Matej Stepanek <dito2>
Component:	[OLD] Core system	Assignee:	Roy Marples (RETIRED) <uberlord>
Status:	RESOLVED FIXED
Severity:	normal
Priority:	High
Version:	2005.1
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Matej Stepanek 2006-01-26 07:13:14 UTC

After installing openvpn, /etc/passwd doesn't contain openvpn user. The default
configuration file contains user nobody to run under. I suggest user openvpn
to be added and the default configuration file patched to contain openvpn instead of nobody.

Using nobody decreases the security because if more programs use nobody, exploiting one means exploiting the other as well (for example the gained user can  stop and attach the process and read out key material from semiconductor memory).

Comment 1 Roy Marples (RETIRED) gentoo-dev

2006-05-09 02:24:59 UTC

Fixed in openvpn-2.1_beta14