[Bug 295426] security/openvpn: connects fine, but it drops capabilities / root UID/GID and then eventually times out and fails to clean up

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295426

            Bug ID: 295426
           Summary: security/openvpn: connects fine, but it drops
                    capabilities / root UID/GID and then eventually times
                    out and fails to clean up
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: mandree@FreeBSD.org
          Reporter: adrian@freebsd.org
          Assignee: mandree@FreeBSD.org
             Flags: maintainer-feedback?(mandree@FreeBSD.org)

openvpn on -head will setup fine, but it eventually drops root permissions /
capabilities, and then subsequent things will fail. It times out, and doesn't
clean up after itself.

I then need to manually delete the tun interface before I can successfully run
it again.

```
2026-05-19 15:30:07 us=817948 /sbin/route add -net 172.30.13.0 10.2.0.1
255.255.255.0
add net 172.30.13.0: gateway 10.2.0.1
2026-05-19 15:30:07 us=818797 Data Channel MTU parms [ mss_fix:1400 max_frag:0
tun_mtu:1500 tun_max_mtu:1600 headroom:136 payload:1768 tailroom:562 ET:0 ]
2026-05-19 15:30:07 us=818962 Unable to retain capabilities
2026-05-19 15:30:07 us=818971 GID set to nobody
2026-05-19 15:30:07 us=818978 UID set to nobody
2026-05-19 15:30:07 us=818980 Initialization Sequence Completed
2026-05-19 15:30:07 us=818984 Data Channel: cipher 'AES-256-GCM', peer-id: 7
2026-05-19 15:30:07 us=818986 Timers: ping 10, ping-restart 120
2026-05-19 15:30:07 us=819010 Failed to poll for packets: Operation not
permitted (errno=1)
2026-05-19 15:30:07 us=819042 Failed to poll for packets: Operation not
permitted (errno=1)
2026-05-19 15:30:23 us=40175 Failed to poll for packets: Operation not
permitted (errno=1)
2026-05-19 15:30:38 us=258823 Failed to poll for packets: Operation not
permitted (errno=1)
2026-05-19 15:30:53 us=440367 Failed to poll for packets: Operation not
permitted (errno=1)
```

-- 
You are receiving this mail because:
You are the assignee for the bug.