diff options
| author | Selva Nair | 2019-01-22 10:50:32 -0500 |
|---|---|---|
| committer | Gert Doering | 2019-01-22 17:01:28 +0100 |
| commit | 0d94d433438f239ff7cf0749f765a503c698f5e8 (patch) | |
| tree | c65757c7be915a9cb7b5b6b3436498d1eacef836 /src/openvpnserv | |
| parent | a3fd78d48616ab21908b116d5ce785986893e02d (diff) | |
| download | openvpn-0d94d433438f239ff7cf0749f765a503c698f5e8.zip openvpn-0d94d433438f239ff7cf0749f765a503c698f5e8.tar.gz | |
White-list pull-filter and script-security in interactive service
This allows the Windows GUI to use these options on the command
line without triggering user authorization errors.
Useful for
(i) ignoring certain pushed options such as "route-method" which
could otherwise bypass the interactive service
(ii) enforcing a safer script-security setting from the GUI
See also:
https://github.com/OpenVPN/openvpn-gui/issues/235#issuecomment-456142928
Signed-off-by: Selva Nair <selva.nair@gmail.com>
Acked-by: Gert Doering <gert@greenie.muc.de>
Message-Id: <1548172232-11268-1-git-send-email-selva.nair@gmail.com>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg18154.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
Diffstat (limited to 'src/openvpnserv')
| -rw-r--r-- | src/openvpnserv/validate.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/src/openvpnserv/validate.c b/src/openvpnserv/validate.c index 9e1d7d2..9b01770 100644 --- a/src/openvpnserv/validate.c +++ b/src/openvpnserv/validate.c @@ -44,6 +44,8 @@ static const WCHAR *white_list[] = L"setenv", L"service", L"verb", + L"pull-filter", + L"script-security", NULL /* last value */ }; |