Hello,
this is a plausible problem. What do you think how this should be
solved for debian? I guess normally openvpn should read the config as
root and drop the privileges afterwards.

In my concrete case I do not see the option, but it may be a default.
My ./multi-user.target.wants/openvpn.service file:

-----

# This service is actually a systemd target,
# but we are using a service since targets cannot be reloaded.

[Unit]
Description=OpenVPN service
After=network.target

[Service]
Type=oneshot
RemainAfterExit=yes
ExecStart=/bin/true
ExecReload=/bin/true
WorkingDirectory=/etc/openvpn

[Install]
WantedBy=multi-user.target

-----

with kind regards,
Alex

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to