Description of problem:
SELinux prevents openvpn to set its process priority when the nice parameter is used.

Version-Release number of selected component (if applicable):
selinux-policy-targeted-3.7.19-54.el6_0.5

How reproducible:

Steps to Reproduce:
1. add 'nice -7' to the openvpn server config
2. start openvpn
3.
  
Actual results:
WARNING: nice -7 failed: Operation not permitted

Expected results:
nice -7 succeeded

Additional info:
allow2audit tells me the following is required (and in fact makes things work):

----------------
module invocaopenvpn 1.0;

require {
        type openvpn_t;
        class capability sys_nice;
        class process setsched;
}

#============= openvpn_t ==============
allow openvpn_t self:capability sys_nice;
allow openvpn_t self:process setsched;
----------------

Thanks,
Simon