# vpn tunneling protocol manager type mtp, domain; type mtp_exec, exec_type, file_type; init_daemon_domain(mtp) net_domain(mtp) # pptp policy allow mtp self:socket create_socket_perms; allow mtp self:capability net_raw; allow mtp ppp:process signal; allow mtp vpn_data_file:dir search;