change exec to aegis-exec, otherwise it doesn't inherit the privileges. Things are ofcourse easier if you install the package to some real origin. vpnc --script 'aegis-exec /opt/vpn9c/bin/vpnc-script' --local-port 0 With proper manifest you don't need even add --local-port