OpenVPN profile breaks openvpn

[bigli0n]

When using this profile in enforce mode, openvpn cannot launch. The syntax in the profile is incorrect, and although the PID should be whitelisted, it is denied by apparmor. Debian 11. Starting openvpn via systemctl with apparmor in complain mode, then setting it to enforce works because the pid file has already been created but this is not ideal

[nobody43]

Hi. Could you provide the error message?

[nobody43]

Anyway, you could checkout this profile: https://github.com/roddhjav/apparmor.d/blob/master/apparmor.d/groups/network/openvpn
It's more advanced.