Re: Ideas for securing OpenVPN on an OpenWrt router

[Eero Volotinen <eero.volotinen@iki.fi>]

2011/3/8 Andrej Kacian <andrej+debian@kacian.sk>:
> On Tue, 08 Mar 2011 07:34:24 -0800
> erikmccaskey64 <erikmccaskey64@zoho.com> wrote:
>
>> OpenWrt isn't OpenBSD, so from the "ps" command i can see that the OpenVPN
>> is runned by root. it's not so secure. How can i make it more secure?
>
> In the openvpn configuration file:
>
> user nobody
> group nogroup
>
> (or whatever equivalents OpenWrt has for these)
>
> openvpn will run as root, do necessary stuff and drop privileges.

and chroot directive also?

--
Eero