I am running CentOS 6.4.
# cat /etc/centos-release
CentOS release 6.4 (Final)
After some updates, and a reboot, OpenVPN fails to start.
# service openvpn start
Starting openvpn: [FAILED]
/var/log/messages shows the following output on openvpn:
Nov 13 14:09:58 host kernel: type=1400 audit(1384344598.334:39761): avc: denied { read write } for pid=5777 comm="openvpn" name="openvpn" dev=dm-0 ino=54527865 scontext=unconfined_u:system_r:openvpn_t:s0 tcontext=unconfined_u:object_r:openvpn_var_log_t:s0 tclass=dir
Nov 13 14:09:58 host openvpn[5777]: Options error: --status fails with '/var/log/openvpn/openvpn-status.log': Permission denied
So apparently it's an SELinux problem.
I tried updating to openvpn-2.3.2-2.el6.x86_64 as per this bug report but no success. How should I debug / fix this?
EDIT: Thanks to both Iain and Jiri Xichtkniha. I changed to location of the log file in /etc/openvpn/server.conf to read
status /var/log/openvpn-status.log
which works with current policy.