On Thu, Dec 09, 2004 at 04:54:26PM -0500, David Hollis wrote: > Looking into it a bit, I found that the openvpn.fc sets up the file > contexts so that the openvpn files can be confined to an openvpn > specific domain. Unfortunately, there isn't an openvpn domain specified > at this point. The openvpn.fc file is essentially ignored (with a > targeted policy anyway) since there is not an associated > domains/program/openvpn.te file to define the domain. Ah, so this is needed: http://www.nsa.gov/selinux/list-archive/0407/7704.cfm Steve -- Steven Pritchard - K&S Pritchard Enterprises, Inc. Email: steve@xxxxxxxxx http://www.kspei.com/ Phone: (618)398-3000 Mobile: (618)567-7320