diff --git a/docs/docker-openvpn.te b/docs/docker-openvpn.te
new file mode 100644
index 0000000..d3a1d22
--- /dev/null
+++ b/docs/docker-openvpn.te
@@ -0,0 +1,10 @@
+module docker-openvpn 1.0;
+
+require {
+	type svirt_lxc_net_t;
+	class tun_socket create;
+}
+
+#============= svirt_lxc_net_t ==============
+allow svirt_lxc_net_t self:tun_socket create;
+