<![CDATA[Dev1 Galaxy Forum / OPENVPN - Setting up service for a given user]]> https://dev1galaxy.org/viewtopic.php?id=5030 Thu, 19 May 2022 11:21:18 +0000 FluxBB <![CDATA[Re: OPENVPN - Setting up service for a given user]]> https://dev1galaxy.org/viewtopic.php?pid=36000#p36000 you'll have to move openvpn from /sbin into /usr/local/bin
I'd suggest trying to use network manager or some user side application with VPN support.

As of now I have not tried and always ran it as root.
Potentially you can try experimenting with firejail or fakeroot .

]]> Thu, 19 May 2022 11:21:18 +0000 https://dev1galaxy.org/viewtopic.php?pid=36000#p36000 <![CDATA[OPENVPN - Setting up service for a given user]]> https://dev1galaxy.org/viewtopic.php?pid=35907#p35907 My aim is to forget the use of sudo / su command for starting openvpn service on Devuan. Running it so has the possibility for some hostile parties to gain control of its terminal session -which is unlikely- but I would like to make it a way more secure.

For the first step I'd create a user with only access to /etc/openvpn:
sudo adduser vpnhandler
sudo chown -R vpnhandler:vpnhandler /etc/openvpn

Then it would be great to set it up as a service which is auto-started by vpnhandler so I don't have to type openvpn xxxxx.ovpn in the terminal every time with that user.

Can someone help me with this? I'm open to any idea.

]]> Tue, 10 May 2022 17:09:36 +0000 https://dev1galaxy.org/viewtopic.php?pid=35907#p35907