DOCS/General/privilege-separation/doas-ovpmon.conf

permit nopass ovpmon as root cmd /usr/local/sbin/ovpmon-helper args install-config
permit nopass ovpmon as root cmd /usr/local/sbin/ovpmon-helper args publish-crl
permit nopass ovpmon as root cmd /usr/local/sbin/ovpmon-helper args service start
permit nopass ovpmon as root cmd /usr/local/sbin/ovpmon-helper args service stop
permit nopass ovpmon as root cmd /usr/local/sbin/ovpmon-helper args service restart
permit nopass ovpmon as root cmd /usr/local/sbin/ovpmon-helper args service status
Run API services unprivileged; add root helper for OpenVPN config and service control 2026-09-30 12:32:58 +00:00			`permit nopass ovpmon as root cmd /usr/local/sbin/ovpmon-helper args install-config`
Publish CRL for the unprivileged OpenVPN user so crl_verify works 2026-09-30 12:38:30 +00:00			`permit nopass ovpmon as root cmd /usr/local/sbin/ovpmon-helper args publish-crl`
Run API services unprivileged; add root helper for OpenVPN config and service control 2026-09-30 12:32:58 +00:00			`permit nopass ovpmon as root cmd /usr/local/sbin/ovpmon-helper args service start`
			`permit nopass ovpmon as root cmd /usr/local/sbin/ovpmon-helper args service stop`
			`permit nopass ovpmon as root cmd /usr/local/sbin/ovpmon-helper args service restart`
			`permit nopass ovpmon as root cmd /usr/local/sbin/ovpmon-helper args service status`