aboutsummaryrefslogtreecommitdiff
path: root/plugins/down-root/README
diff options
context:
space:
mode:
authorjames <james@e7ae566f-a301-0410-adde-c780ea21d3b5>2005-10-13 04:08:20 +0000
committerjames <james@e7ae566f-a301-0410-adde-c780ea21d3b5>2005-10-13 04:08:20 +0000
commitcecc5e657bb38c03f80747eab40073bc6ded9631 (patch)
tree01ade4571a8db916a2966cee89f4f09e1f8403b3 /plugins/down-root/README
parentMakefile.am needs to do a rm -rf on .svn directories (diff)
downloadopenvpn-cecc5e657bb38c03f80747eab40073bc6ded9631.tar.xz
Renamed plugin to plugins to work around
strange automake issue. 2.1_beta2 git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@603 e7ae566f-a301-0410-adde-c780ea21d3b5
Diffstat (limited to 'plugins/down-root/README')
-rw-r--r--plugins/down-root/README29
1 files changed, 29 insertions, 0 deletions
diff --git a/plugins/down-root/README b/plugins/down-root/README
new file mode 100644
index 0000000..d337ffe
--- /dev/null
+++ b/plugins/down-root/README
@@ -0,0 +1,29 @@
+down-root -- an OpenVPN Plugin Module
+
+SYNOPSIS
+
+The down-root module allows an OpenVPN configuration to
+call a down script with root privileges, even when privileges
+have been dropped using --user/--group/--chroot.
+
+This module uses a split privilege execution model which will
+fork() before OpenVPN drops root privileges, at the point where
+the --up script is usually called. The module will then remain
+in a wait state until it receives a message from OpenVPN via
+pipe to execute the down script. Thus, the down script will be
+run in the same execution environment as the up script.
+
+BUILD
+
+Build this module with the "make" command. The plugin
+module will be named openvpn-down-root.so
+
+USAGE
+
+To use this module, add to your OpenVPN config file:
+
+ plugin openvpn-down-root.so "command ..."
+
+CAVEATS
+
+This module will only work on *nix systems, not Windows.