On 01/16/2012 04:55 AM, Ed Greshko wrote: 
On 01/15/2012 11:13 AM, Ed Greshko wrote:

2.  What change could be made to allow the certs to be in $HOME/.openVPN?

OK.....  After *properly* forming the google search I've done the
following....

semanage fcontext -a -t home_cert_t "/home/user/.openVPN(/.*)?"
restorecon -R -v /home/user/.openVPN

So, that is all fixed up....
Yes, this is also a solution. Or you can move your certs to

/home/user/.cert

which is default location for these certs. I will write a new openvpn_selinux man page which will mention it.


Also could you look for setroubleshootd_t messages in your  /var/log/audit/audit.log?


Regards,
Miroslav





--
selinux mailing list
selinux@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/selinux