Re: --user specified but lacking CAP_SETPCAP

Marc SCHAEFER <[email protected]>
Newsgroups gmane.network.openvpn.user
Message-ID <[email protected]> 
> used to allow the OpenVPN process to keep setup certain capabilities as it
> transitions to the user provided via the --user option.  The CAP_NET_ADMIN
> is, not surprisingly, used to setup the virtual network adapter (both tun
> and ovpn-dco) and get network routes set up properly.

And, if you run OpenVPN within a Docker container, you will need to manually add
that capability at the Docker container creation time:

   --cap-add=NET_ADMIN
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.