openvpn: let instances drop to nobody in default config.

This is for security precautions.  As persist_tun and persist_key are
already there, this should not cause compatibility issue.

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45961 3c298f89-4303-0410-b956-a3cf2f4a3e73

diff --git a/package/network/services/openvpn/files/openvpn.config b/package/network/services/openvpn/files/openvpn.config
index 5cf0ba6..3e053c3 100644 (file)
--- a/package/network/services/openvpn/files/openvpn.config
+++ b/package/network/services/openvpn/files/openvpn.config
@@ -253,6 +253,7 @@ config openvpn sample_server
        # of the privilege downgrade.
        option persist_key 1
        option persist_tun 1
        # of the privilege downgrade.
        option persist_key 1
        option persist_tun 1

+       option user nobody

 
        # Output a short status file showing
        # current connections, truncated
 
        # Output a short status file showing
        # current connections, truncated


@@ -337,6 +338,7 @@ config openvpn sample_client
        # Try to preserve some state across restarts.
        option persist_key 1
        option persist_tun 1
        # Try to preserve some state across restarts.
        option persist_key 1
        option persist_tun 1

+       option user nobody

 
        # If you are connecting through an
        # HTTP proxy to reach the actual OpenVPN
 
        # If you are connecting through an
        # HTTP proxy to reach the actual OpenVPN