Re: Generic IPSEC vpn plugin

[Dan Williams <dcbw redhat com>]

On Tue, 2009-04-28 at 18:35 +0100, David Woodhouse wrote:
> On Tue, 2009-04-28 at 12:32 -0400, Dan Williams wrote:
> > That's fine, since NM (and the VPN plugin) would be running as root for
> > the time being.  David woodhouse wants to make them not run as root, but
> > that might only happen for the VPN daemons that don't actually need
> > root.  Sounds like for now, the openswan one would.
> 
> We already have that working for OpenConnect. It's optional, and I
> haven't changed any other VPN dæmons to do it.

I assume that would mean the vpn daemon opening the pluto socket before
dropping privs, right?

Dan