Changes between Version 7 and Version 8 of UnprivilegedUser

Timestamp:

10/18/12 09:58:49 (12 years ago)

Author:

eugenekay

Comment:

Make 'openvpn' user more restricted

UnprivilegedUser

@@ -19 +19 @@
                 $openvpn --daemon --writepid $piddir/$bn.pid --config $c --cd $work $script_security
             else
-                su $OPENVPN_USER --command="$openvpn --daemon --writepid $piddir/$bn.pid --cd $work --config $c $script_security"
+                su $OPENVPN_USER -s /bin/sh --command="$openvpn --daemon --writepid $piddir/$bn.pid --cd $work --config $c $script_security"
             fi
 }}}
@@ -54 +54 @@
 [root@hostname ~]# mkdir /var/lib/openvpn
 [root@hostname ~]# chown openvpn:openvpn /var/lib/openvpn
-[root@hostname ~]# usermod -d /var/lib/openvpn -s /bin/sh openvpn
+[root@hostname ~]# usermod -d /var/lib/openvpn -s /sbin/nologin openvpn
 }}}