openvpn: let instances drop to nobody in default config.

This is for security precautions.  As persist_tun and persist_key are
already there, this should not cause compatibility issue.

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

SVN-Revision: 45961
This commit is contained in:
Felix Fietkau 2015-06-14 17:41:43 +00:00
parent 3f726e7b2e
commit 2c9fbdf0bc

View file

@ -253,6 +253,7 @@ config openvpn sample_server
# of the privilege downgrade. # of the privilege downgrade.
option persist_key 1 option persist_key 1
option persist_tun 1 option persist_tun 1
option user nobody
# Output a short status file showing # Output a short status file showing
# current connections, truncated # current connections, truncated
@ -337,6 +338,7 @@ config openvpn sample_client
# Try to preserve some state across restarts. # Try to preserve some state across restarts.
option persist_key 1 option persist_key 1
option persist_tun 1 option persist_tun 1
option user nobody
# If you are connecting through an # If you are connecting through an
# HTTP proxy to reach the actual OpenVPN # HTTP proxy to reach the actual OpenVPN