Doc: Inform on --ppd-* options risks in README

Reference: #54
adrienverge · May 21, 2016 · 7b1e9ee · 7b1e9ee
1 parent dc7d547
commit 7b1e9ee
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -94,6 +94,10 @@ Cmnd_Alias  OPENFORTIVPN = /usr/bin/openfortivpn
 %adm       ALL = (ALL) OPENFORTIVPN
 ```
 
+**Warning**: Make sure only trsuted users can run openfortivpn as root! As
+described in #54, a malicious user could use `--ppp-plugin` and `--ppd-log`
+options to divert the program's behaviour.
+
 Contributing
 ------------