Description of problem:
The openresolve package has been installed on the Fedora 29 the prevent DNS leak at OpenVpn. That is working pretty good. After that I installed
Openconnect client (openconnect-8.01-1.fc29.src.rpm). The client conf file is like that:
=============
certificate /home/ahmed/.cert/sky.crt
cert-expire-warning 10
sslkey /home/ahmed/.cert/sky.key
cafile /home/ahmed/.cert/ca-sky.crt
disable-ipv6
no-dtls
background
servercert sha256:cfaae35ae801d0d1d55bfdc0867dac1681de18272fa809bc161a5e7761cd37eb
=============
The Openconnect client connects and working OK, however there is dns-leak. If I make "setenforce 0" - no leaks.
SElinux denies correct working of openresolve daemon
SELinux is preventing resolvconf from 'read' accesses on the файл tun0.

*****  Plugin catchall (100. confidence) suggests   **************************

Если вы считаете, что resolvconf должно быть разрешено read доступ к tun0 file по умолчанию.
Then рекомендуется создать отчет об ошибке.
Чтобы разрешить доступ, можно создать локальный модуль политики.
Do
разрешить этот доступ сейчас, выполнив: # ausearch -c 'resolvconf'--raw | audit2allow -M my-resolvconf # semodule -X 300 -i my-resolvconf.pp

Additional Information:
Source Context                system_u:system_r:vpnc_t:s0
Target Context                system_u:object_r:openvpn_var_run_t:s0
Target Objects                tun0 [ file ]
Source                        resolvconf
Source Path                   resolvconf
Port                          <Неизвестно>
Host                          (removed)
Source RPM Packages           
Target RPM Packages           
Policy RPM                    selinux-policy-3.14.2-46.fc29.noarch
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Permissive
Host Name                     (removed)
Platform                      Linux (removed) 4.19.15-300.fc29.x86_64 #1 SMP Mon
                              Jan 14 16:32:35 UTC 2019 x86_64 x86_64
Alert Count                   3
First Seen                    2019-01-18 02:23:17 EET
Last Seen                     2019-01-18 02:24:32 EET
Local ID                      0e182b71-0c7a-4355-a6bb-f59a1220b8cd

Raw Audit Messages
type=AVC msg=audit(1547771072.846:570): avc:  denied  { read } for  pid=10245 comm="resolvconf" name="tun0" dev="tmpfs" ino=211149 scontext=system_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:openvpn_var_run_t:s0 tclass=file permissive=1


Hash: resolvconf,vpnc_t,openvpn_var_run_t,file,read

Version-Release number of selected component:
selinux-policy-3.14.2-46.fc29.noarch

Additional info:
component:      selinux-policy
reporter:       libreport-2.9.7
hashmarkername: setroubleshoot
kernel:         4.19.15-300.fc29.x86_64
type:           libreport