connman-vpn.conf(5)

💖 connman-vpn.conf — the ConnMan-VPN config file, bestie edition 💖

okay so this is the manual page for connman-vpn.conf(5), aka the little file that tells ConnMan-VPN how to act. she's optional but she's iconic. let's get into it 🫶

---

✨ SYNOPSIS ✨

/etc/connman/connman-vpn.conf

that's the default home address, but she's flexible, more on that in a sec 💅

---

🌸 DESCRIPTION 🌸

so connman-vpn.conf is a configuration file for ConnMan-VPN. is it required? no bestie, it's completely optional, but if you do want to set up various aspects of how ConnMan-VPN behaves, this is the file to do it in. no cap.

you can also move the file somewhere else if you want — the location can be changed by using the --config= argument over in connman-vpn(8). slay, your file your rules.

now here's the juicy part 🍓 — the DAC privileges (that's user, group and supplementary groups) of a VPN binary that gets run by connman-vpn(8) can be controlled right here in this config. the config in connman-vpn.conf applies to all VPN types, and it can be overridden by dropping separate configs into /etc/connman/vpn-plugin/ using the plugin name + .conf suffix, with the same syntax. for example, for OpenVPN the path to config is /etc/connman/vpn-plugin/openvpn.conf, and that file will override any value in the main configuration. the way that works?? lowkey elegant 😭✨

---

🎀 FILE FORMAT 🎀

the configuration file is made of sections (groups) of key-value pairs. here's the vibe check:

• lines beginning with a # and blank lines are considered comments
• sections are started by a header line containing the section enclosed in [ and ]
• sections end implicitly — either when the next section starts, or at the end of the file
• each key-value pair must be contained in a section (no free-floating keys, they need a home 🏠)

description of sections and available keys follows, babes:

💜 [General] 💜

this section is the only mandatory section of the configuration file. yes, the one you literally cannot skip. main character energy fr.

• InputRequestTimeout=secs — set the input request timeout. default is 300 seconds. the request for inputs like passphrase will timeout after a certain amount of time, so use this setting to increase the value in case of different user interface designs. (that's the documented use, bestie — increase it, don't come for me.)

💜 [DACPrivileges] 💜

this section controls the DAC privileges to use for a VPN binary used by a VPN plugin. the DAC privileges that can be set are user, group and supplementary groups. yes, all three, we're thorough here 💅

• User=username/uid — the user on the system to use for running the VPN binary. you can use a username or a uid, dealer's choice.
• Group=groupname/gid — the main group to use for running the VPN binary. group name or gid, same energy.
• SupplementaryGroups=groupnames/gids — comma separated list of supplementary groups to set for the VPN binary. groups can be defined with their names or gid's. comma separated, don't forget the commas, ok? 🙈

---

🌈 EXAMPLES 🌈

okay so the following example configuration sets InputRequestTimeout to 10 minutes, runs VPNs as user "vpn_user" of group "vpn" with additional supplementary groups "inet" and "net_admin". look at her go ✨

[General]
InputRequestTimeout = 600

[DACPrivileges]
User = vpn_user
Group = vpn
SupplementaryGroups = inet, net_admin

---

⭐ SEE ALSO ⭐

connman(8), connman-vpn(8)

go read those too, they're the supporting cast and they ate 🫶

---

heads up bestie: that first section, [General]? mandatory. no [General], no deal. 💀

and that's the whole page, you're officially a connman-vpn.conf expert, periodt 👑

this was the connman-vpn.conf(5) manual page from the File Formats Manual, dated 2015-10-15. mwah, love u, bye 💖🧚🌸