- allow options for all openvpn instances

Changed files:
    openvpn.init -> 1.32
    openvpn.sysconfig -> 1.4

diff --git a/openvpn.init b/openvpn.init
index edd3be90eeffdc41ddf613f3c6004379fe6d5587..8f0c97baf514261b1ceb90789241247220715afd 100644 (file)
--- a/openvpn.init
+++ b/openvpn.init
@@ -75,7 +75,7 @@ start() {
                                fi
 
                                daemon openvpn --daemon --writepid "/var/run/openvpn/$tun.pid" \
-                                       --config $config --cd /etc/openvpn
+                                       --config $config --cd /etc/openvpn ${OPENVPN_OPT}
                                RET=$?
                        fi
                        [ $RETVAL -eq 0 ] && RETVAL=$RET

diff --git a/openvpn.sysconfig b/openvpn.sysconfig
index 5c7d5bf96f2c7e6b8099016d96eee9f9964057d4..42a47294366466bc50aaed29fc0b0a79a1ce37d4 100644 (file)
--- a/openvpn.sysconfig
+++ b/openvpn.sysconfig
@@ -3,6 +3,9 @@
 # Nice level for sysconf
 SERVICE_RUN_NICE_LEVEL="+0"
 
+# Options for all tunnels
+#OPENVPN_OPT="--script-security 2"
+
 # Tunnels to set up. For each tunnel name, there should be config file in /etc/openvpn
 #TUNNELS="mytunnel"
 TUNNELS=""