ocproxy security

Orin L. orinlunder at gmail.com
Fri Oct 3 00:25:34 PDT 2014


OpenConnect Community:

Has the OpenConnect Team examined and vetted the source code of
"ocproxy" to verify its security?  Which would be safer:  to run
OpenConnect as root without ocproxy, or to run OpenConnect as a
non-root user using ocproxy?  (I don't need particular features of
ocproxy, I just have the general impression that it's preferable to
avoid running internet-facing programs as root).

Thanks,

OL



More information about the openconnect-devel mailing list