The information herein applies for all Unix like operating systems.

In order to use OpenVPN mode you need to either run Your Freedom as root or to install OpenVPN setuid root. If you don't know what this is, don't despair, just follow the instructions below. You need root privileges, so log in as or become root.

It is assumed that OpenVPN is already installed on your system. Most Linux distributions will ship with an OpenVPN package, just install the package and you should be fine. If it's not installed and you can't find a suitable package, get it from http://openvpn.net/. You don't need an OpenVPN configuration, the Your Freedom client will take care of this for you!

Now locate the OpenVPN binary. It should be /usr/sbin/openvpn but it could be elsewhere too. If you can't find it, do this:

# cd /
# find . -type f -a -name openvpn

Now cd to where it is, e.g.

# cd /usr/sbin

List the directory record.

# ls -al openvpn

It will probably look like this:

-rwxr-xr-x 1 root root 371152 Dec 22 19:43 openvpn

Now check (under your own user id, not as root) to which groups you belong:

> groups

If you are not a member of a suitable group, make sure you join one. A good choice would be adm or dialout. Let's assume you are a member of the dialout group (to become one, open /etc/group as root and add your name to it, then log out and back in). We need to install the openvpn binary in a way that all members of the group dialout can run it as root, but ordinary users can't:

# chgrp dialout openvpn
# chmod u+s,g+rx,o-rx openvpn

Your permissions should now look like this:

# ls -al openvpn

-rwsr-x--- 1 root dialout 371152 Dec 22 19:43 openvpn

Now in order to ensure that the Your Freedom client actually finds the OpenVPN binary, click on Configure, go to the OpenVPN panel and configure the full path of the binary there (in this example, /usr/sbin/openvpn).

That's all you should have to do, OpenVPN mode should now work for you. But don't forget to tick the OpenVPN box in the Ports panel of the Your Freedom client!