Vulnerability analisis 8. I try to cover here the vulnerability issues arising from this particular setup and VPNs in general.
Any comments are warmly welcome.
Well, I'm excessively using sudo. I believe it's still safer than using setuid bits. It's still a backdraw of Linux that it hasn't got more fine-grained access control. What is worse, there are shell scripts which are getting called through sudo. It can be configured by user's .ppprc.