OpenVPN modules for SELinux

Each time I setup a new keys for my client, the selinux always preventing the connection so the vpn wont work. this is the syntax for enable openvpn selinux.
module openvpn 1.0;

require {
        type openvpn_t;
        type user_home_t;
        class file { read open };
}

#============= openvpn_t ==============
allow openvpn_t user_home_t:file open;
#!!!! This avc is allowed in the current policy

allow openvpn_t user_home_t:file read;
And how to generate a module from *.te file? please read my previous article
http://kura2gurun.blogspot.com/2011/09/tips-and-trick-part-3.html

Bye :-)

Comments

Popular posts from this blog

authentication failure using SSH pam_unix(sshd:auth): authentication failure;

Howto configure SPLUNK Universal Forwarder

openvpn howto make OCSP server using OpenSSL [Part2]