Comment 5 for bug 260291

looks like the nm plugin needs a fix on its own. Thanks to M. Biebl for providing that patch.

diff --git a/openvpn/src/nm-openvpn-service.c b/vpn-daemons/openvpn/src/nm-openvpn-service.c
index 9d0c7d4..0df1178 100644
--- a/openvpn/src/nm-openvpn-service.c
+++ b/openvpn/src/nm-openvpn-service.c
@@ -611,6 +611,10 @@ nm_openvpn_start_openvpn_binary (NMOpenvpnPlugin *plugin,
  add_openvpn_arg (args, "--syslog");
  add_openvpn_arg (args, "nm-openvpn");

+ // Override external script protection
+ add_openvpn_arg (args, "--script-security");
+ add_openvpn_arg (args, "2");
+
  /* Up script, called when connection has been established or has been restarted */
  add_openvpn_arg (args, "--up");
  add_openvpn_arg (args, NM_OPENVPN_HELPER_PATH);