On 05/08/13 17:17, Mihamina Rakotomandimby wrote:
> Hi all,
>
> I configured NM/OpenVPN to get the needed certificates from my homedir ${HOME}/openvpn/*
>
> When trying to launch, it fails because of:
>
> May 8 12:12:51 mihamina-i5 setroubleshoot: SELinux is preventing /usr/sbin/openvpn from open access on the file /home/mihamina/openvpn/mihamina.crt. For complete SELinux messages. run sealert -l 2a4693c2-93a8-4d29-94a5-0b0fdd89e592
> May 8 12:12:56 mihamina-i5 NetworkManager[659]: <info> VPN service 'openvpn' disappeared
> May 8 12:13:19 mihamina-i5 /usr/bin/sealert: exception ValueError: unknown locale: en_DK
> May 8 12:13:26 mihamina-i5 /bin/sealert: exception ValueError: unknown locale: en_DK
>
>
> What to do? I really want to give its chance to SELinux... :-)
>
>
What you really want to do is store your certs in $HOME/.cert. That directory is defined in selinux policy and will have the proper context.
[egreshko@meimei ~]$ ls -dZ .cert
drwxrwxr-x. egreshko egreshko unconfined_u:object_r:home_cert_t:s0 .cert
--
The only thing worse than a poorly asked question is a cryptic answer.
--
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
