module asdf2 1.0;

require {
        class file { read write };
        class tcp_socket { listen name_bind };
        type openvpn_etc_t;
        type openvpn_t;
        type port_t;
        type useradd_t;
        type var_log_t;
        role system_r;
};

allow openvpn_t openvpn_etc_t:file write;
allow openvpn_t self:tcp_socket listen;
allow openvpn_t port_t:tcp_socket name_bind;
allow useradd_t var_log_t:file { read write };