Security issues

[ghost]

Differently from autovpn, this tool is able to run on Windows. Instead of executing sudo directly from the code, this tool leaves the task up to the user, so it is suposed to work on any platform.

• You download a file over HTTP
• This file is then piped straight into a file
• This file is then fed into OpenVPN running as root

So pretty much, if the remote host wanted to, they could run arbitrary commands on your host, as root.

You can provide script-security 2 inside the configuration file which will result in execution of binaries and other scripts inside the configuration file

¯\(ツ)/¯

[rodrigogs]

I'll try to make it happen as soon as I can. Also, pull requests are very welcome :)

[rodrigogs]

@chnkr I'd appreciate some help with this configuration, if you may.