2 ms·

Yeah, for some reason almost all user-specific customization of network-connectivity (VPN, DNS, etc) requires root privileges.

• Vogtinator 3y ago
  Yeah, because it affects networking in the entire system. If some pam session module were to set up its own network namespace that is shared by all user processes after login, this could be (mostly) solved. The result would be some surprising behaviour though, as processes outside have a possibly vastly different view of the network.
  • Joker_vD 3y ago
    Just like containers?.. I don't see how that's surprising or undesirable.
    • Vogtinator 3y ago
      Not necessary undesirable, but definitely surprising as it's a major change from the current behaviour.