aboutsummaryrefslogtreecommitdiff
path: root/openvpn.8
diff options
context:
space:
mode:
authorjames <james@e7ae566f-a301-0410-adde-c780ea21d3b5>2006-04-05 06:57:31 +0000
committerjames <james@e7ae566f-a301-0410-adde-c780ea21d3b5>2006-04-05 06:57:31 +0000
commitbe9150b693345134142d1d58fac9b251d7e7ba5d (patch)
tree3b5ca161c5a2448461e5bc8a40688a83ca7d8eae /openvpn.8
parent"topology subnet" fix for FreeBSD (Benoit Bourdin). (diff)
downloadopenvpn-be9150b693345134142d1d58fac9b251d7e7ba5d.tar.xz
Added man page entry for --setenv-safe.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@989 e7ae566f-a301-0410-adde-c780ea21d3b5
Diffstat (limited to 'openvpn.8')
-rw-r--r--openvpn.812
1 files changed, 12 insertions, 0 deletions
diff --git a/openvpn.8 b/openvpn.8
index 6b3711b..e87609d 100644
--- a/openvpn.8
+++ b/openvpn.8
@@ -251,6 +251,7 @@ openvpn \- secure IP tunnel daemon.
[\ \fB\-\-server\fR\ \fInetwork\ netmask\fR\ ]
[\ \fB\-\-service\fR\ \fIexit\-event\ [0|1]\fR\ ]
[\ \fB\-\-setenv\fR\ \fIname\ value\fR\ ]
+[\ \fB\-\-setenv\-safe\fR\ \fIname\ value\fR\ ]
[\ \fB\-\-shaper\fR\ \fIn\fR\ ]
[\ \fB\-\-show\-adapters\fR\ ]
[\ \fB\-\-show\-ciphers\fR\ ]
@@ -1812,6 +1813,17 @@ Set a custom environmental variable
to pass to script.
.\"*********************************************************
.TP
+.B --setenv-safe name value
+Set a custom environmental variable
+.B OPENVPN_name=value
+to pass to script.
+
+This directive is designed to be pushed by the server to clients,
+and the prepending of "OPENVPN_" to the environmental variable
+is a safety precaution to prevent a LD_PRELOAD style attack
+from a malicious or compromised server.
+.\"*********************************************************
+.TP
.B --disable-occ
Don't output a warning message if option inconsistencies are detected between
peers. An example of an option inconsistency would be where one peer uses