Created attachment 825869 [details]
logind part

Required to make recent weston work. It uses the TakeDevice [1] API to open the seat devices it needs, namely DRM master and input event devices.

[1] http://www.freedesktop.org/wiki/Software/systemd/logind/

Unfortunately it works by passing an open file descriptor via DBus, so an AVC for dbus is generated. For now no other devices are needed though.

#============= system_dbusd_t ==============

allow system_dbusd_t dri_device_t:chr_file { read write };
allow system_dbusd_t event_device_t:chr_file { read write };

#============= systemd_logind_t ==============

allow systemd_logind_t dri_device_t:chr_file { read write ioctl open };