| down-root -- an OpenVPN Plugin Module | |
| SYNOPSIS | |
| The down-root module allows an OpenVPN configuration to | |
| call a down script with root privileges, even when privileges | |
| have been dropped using --user/--group/--chroot. | |
| This module uses a split privilege execution model which will | |
| fork() before OpenVPN drops root privileges, at the point where | |
| the --up script is usually called. The module will then remain | |
| in a wait state until it receives a message from OpenVPN via | |
| pipe to execute the down script. Thus, the down script will be | |
| run in the same execution environment as the up script. | |
| BUILD | |
| Build this module with the "make" command. The plugin | |
| module will be named openvpn-plugin-down-root.so | |
| USAGE | |
| To use this module, add to your OpenVPN config file: | |
| plugin openvpn-plugin-down-root.so "command ..." | |
| CAVEATS | |
| This module will only work on *nix systems, not Windows. |