At 9:11 PM +0200 6/10/07, Roger Grosswiler wrote: >Since f7, openvpn does no longer run in enforcing mode. > >audit2allow brings me this: > >require { > type openvpn_t; > type var_t; > type openvpn_var_run_t; > type hald_t; > type openvpn_etc_t; > class file write; > class dir { write search add_name }; >} > >#============= hald_t ============== >allow hald_t var_t:dir write; > >#============= openvpn_t ============== >allow openvpn_t openvpn_etc_t:file write; >allow openvpn_t openvpn_var_run_t:dir { write search add_name }; > > >how can i get this in, so i get it running? Do you have questions about what "man audit2allow" says? Also, F7 has a new tool, setroubleshoot. -- ____________________________________________________________________ TonyN.:' <mailto:tonynelson@xxxxxxxxxxxxxxxxx> ' <http://www.georgeanelson.com/>