summaryrefslogtreecommitdiffstats
path: root/src/usr/local/www
diff options
context:
space:
mode:
authorjim-p <jimp@netgate.com>2019-05-09 16:22:21 -0400
committerjim-p <jimp@netgate.com>2019-05-09 16:23:28 -0400
commita8a07cfbb40a6134d47626cb81d249cf45c1df64 (patch)
tree9f3384239e64d43638cc603f768ad7990a371ca0 /src/usr/local/www
parent48ab49abab178fc03c8b4b437994280272172781 (diff)
downloadpfsense-a8a07cfbb40a6134d47626cb81d249cf45c1df64.zip
pfsense-a8a07cfbb40a6134d47626cb81d249cf45c1df64.tar.gz
Add warning for OpenVPN client, server, and override privileges.
Since these can use OpenVPN advanced directives to call external scripts, they can be used to run commands that the user may not otherwise have access to run. Issue #9510 (cherry picked from commit f75b0eb8e781570a84e8700b150e09e081ccacfe)
Diffstat (limited to 'src/usr/local/www')
-rw-r--r--src/usr/local/www/vpn_openvpn_client.php1
-rw-r--r--src/usr/local/www/vpn_openvpn_csc.php1
-rw-r--r--src/usr/local/www/vpn_openvpn_server.php1
3 files changed, 3 insertions, 0 deletions
diff --git a/src/usr/local/www/vpn_openvpn_client.php b/src/usr/local/www/vpn_openvpn_client.php
index e1c838a..ce6740f 100644
--- a/src/usr/local/www/vpn_openvpn_client.php
+++ b/src/usr/local/www/vpn_openvpn_client.php
@@ -24,6 +24,7 @@
##|*IDENT=page-openvpn-client
##|*NAME=OpenVPN: Clients
##|*DESCR=Allow access to the 'OpenVPN: Clients' page.
+##|*WARN=standard-warning-root
##|*MATCH=vpn_openvpn_client.php*
##|-PRIV
diff --git a/src/usr/local/www/vpn_openvpn_csc.php b/src/usr/local/www/vpn_openvpn_csc.php
index 5d06a0e..cba5ba5 100644
--- a/src/usr/local/www/vpn_openvpn_csc.php
+++ b/src/usr/local/www/vpn_openvpn_csc.php
@@ -24,6 +24,7 @@
##|*IDENT=page-openvpn-csc
##|*NAME=OpenVPN: Client Specific Override
##|*DESCR=Allow access to the 'OpenVPN: Client Specific Override' page.
+##|*WARN=standard-warning-root
##|*MATCH=vpn_openvpn_csc.php*
##|-PRIV
diff --git a/src/usr/local/www/vpn_openvpn_server.php b/src/usr/local/www/vpn_openvpn_server.php
index 10b4c51..9afcf88 100644
--- a/src/usr/local/www/vpn_openvpn_server.php
+++ b/src/usr/local/www/vpn_openvpn_server.php
@@ -24,6 +24,7 @@
##|*IDENT=page-openvpn-server
##|*NAME=OpenVPN: Servers
##|*DESCR=Allow access to the 'OpenVPN: Servers' page.
+##|*WARN=standard-warning-root
##|*MATCH=vpn_openvpn_server.php*
##|-PRIV
OpenPOWER on IntegriCloud