From: dwalsh@redhat.com (Daniel J Walsh)
Date: Wed, 24 Sep 2008 16:13:41 -0400
Subject: [refpolicy] services_openvpn.patch
Message-ID: <48DA9F75.6040201@redhat.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://people.fedoraproject.org/~dwalsh/SELinux/F10/services_openvpn.patch

Add initrc script support

allow admin to start/stop service

Admin needs admin_pattern on all file types

Addition files in /var/log/openvpn need correcl labeling

needs setgid and sys_chroot

can exec scrpt files in the config directory

connect to httpd port

 Need to interact with terminals if config option "auth-user-pass" is used
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkjan3UACgkQrlYvE4MpobPvgQCgvUa+2msek9gwAat5q0ciXzdC
V3AAnA5MDBh/Y4RUawqAP0FCejWWiBUA
=Rrq9
-----END PGP SIGNATURE-----