ThePiratkapten
Hi all!
I'm running OpenVPN on two Raspberry Pi's, one is a client and the other is a server. I have problems with permissions, but those problems are solved if I run the client as root (and not downgrade the priviligies with the "user" directive).
But what impact on security will this have?
I only connect the client to my own server, and there is nothing valuable on the Raspberry Pi acting as a client, save for OpenVPN. I thought, if a hacker takes control over the OpenVPN process, s/he would already be connected to the tunnel, right? And if that's the case, there are more valuable targets on my network (which can be accessed) than the Raspberry Pis. So what's the point, in this case, of downgrading the priviliges?
Regards
