| down-root -- an OpenVPN Plugin Module |
| |
| SYNOPSIS |
| |
| The down-root module allows an OpenVPN configuration to |
| call a down script with root privileges, even when privileges |
| have been dropped using --user/--group/--chroot. |
| |
| This module uses a split privilege execution model which will |
| fork() before OpenVPN drops root privileges, at the point where |
| the --up script is usually called. The module will then remain |
| in a wait state until it receives a message from OpenVPN via |
| pipe to execute the down script. Thus, the down script will be |
| run in the same execution environment as the up script. |
| |
| BUILD |
| |
| Build this module with the "make" command. The plugin |
| module will be named openvpn-plugin-down-root.so |
| |
| USAGE |
| |
| To use this module, add to your OpenVPN config file: |
| |
| plugin openvpn-plugin-down-root.so "command ..." |
| |
| CAVEATS |
| |
| This module will only work on *nix systems, not Windows. |
