Re: --user specified but lacking CAP_SETPCAP

Gert Doering <[email protected]>
Newsgroups gmane.network.openvpn.user
Message-ID <[email protected]>
Hi,

On Thu, Oct 26, 2023 at 05:27:30PM +0200, Marc SCHAEFER wrote:
> And, if you run OpenVPN within a Docker container, you will need to manually add
> that capability at the Docker container creation time:
> 
>    --cap-add=NET_ADMIN

Ah, yes, thanks for reminding me.

So, systemd with a unit file that takes away too many capabilities, or
docker might be ways to start OpenVPN that will then trigger "does not
work with DCO"...

gert

-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
                             Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany                             [email protected]

_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users
signature.asc (application/pgp-signature, 630 B)
-----BEGIN PGP SIGNATURE-----
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=5a9F
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.