Expose "sudo" config option

psiphon/server/config.go

@@ -268,8 +268,12 @@ type Config struct {
 	PacketTunnelDownStreamPacketQueueSize int
 
 	// PacketTunnelSessionIdleExpirySeconds specifies
-	// tun.ServerConfig.SessionIdleExpirySeconds
+	// tun.ServerConfig.SessionIdleExpirySeconds.
 	PacketTunnelSessionIdleExpirySeconds int
+
+	// PacketTunnelSudoNetworkConfigCommands sets
+	// tun.ServerConfig.SudoNetworkConfigCommands.
+	PacketTunnelSudoNetworkConfigCommands bool
 }
 
 // RunWebServer indicates whether to run a web server component.

psiphon/server/services.go

@@ -83,6 +83,7 @@ func RunServices(configJSON []byte) error {
 
 		packetTunnelServer, err := tun.NewServer(&tun.ServerConfig{
 			Logger: CommonLogger(log),
+			SudoNetworkConfigCommands:   config.PacketTunnelSudoNetworkConfigCommands,
 			GetDNSResolverIPv4Addresses: supportServices.DNSResolver.GetAllIPv4,
 			GetDNSResolverIPv6Addresses: supportServices.DNSResolver.GetAllIPv6,
 			EgressInterface:             config.PacketTunnelEgressInterface,