OpenVPN: only grant access to LAN?

[oguruma]

So, here is the scenario: I would like to allow my sister access to my LAN via VPN, to essentially lease her some storage space on my NAS. The problem is I don't trust her boyfriend, and I don't really want any of his browsing habits to be appear to be representative of me via my ISP. I would like to essentially restrict access when her PC is connected via VPN, i.e. she can only access resources that are on my LAN. Is there any way to do this?

[Derelict]

Don't push a default route and put rules on your OpenVPN tab only allowing access to LAN.