Something

allow openvpn_t openvpn_etc_t:file write;
allow openvpn_t self:tcp_socket listen;
allow openvpn_t port_t:tcp_socket name_bind;
allow useradd_t var_log_t:file { read write };