Re: selinux and openVPN and no log entries

[Miroslav Grepl <mgrepl@xxxxxxxxxx>]

On 01/16/2012 04:55 AM, Ed Greshko wrote:

On 01/15/2012 11:13 AM, Ed Greshko wrote:

2.  What change could be made to allow the certs to be in $HOME/.openVPN?

OK.....  After *properly* forming the google search I've done the
following....

semanage fcontext -a -t home_cert_t "/home/user/.openVPN(/.*)?"
restorecon -R -v /home/user/.openVPN

So, that is all fixed up....

Yes, this is also a solution. Or you can move your certs to

/home/user/.cert

which is default location for these certs. I will write a new openvpn_selinux man page which will mention it.


Also could you look for setroubleshootd_t messages in your  /var/log/audit/audit.log?


Regards,
Miroslav

--
selinux mailing list
selinux@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/selinux

--
selinux mailing list
selinux@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/selinux