close 962007 thanks Below is from a Bullseye system. This was fixed after Buster, so Buster is still missing this.
# sesearch -A -s openvpn_t -t openvpn_var_run_t -c sock_file allow openvpn_t openvpn_runtime_t:sock_file { append create getattr ioctl link lock open read rename setattr unlink write }; -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/