Description of problem:
bumblebee
optirun firefox/google-chrome
SELinux is preventing /usr/bin/Xorg from using the 'sys_tty_config' capabilities.

*****  Plugin catchall (100. confidence) suggests   **************************

If 您确定 Xorg 应默认有 sys_tty_config 功能。
Then 您应该将这个情况作为 bug 报告。
您可以生成本地策略模块允许这个访问。
Do
请执行以下命令此时允许这个访问：
# grep Xorg /var/log/audit/audit.log | audit2allow -M mypol
# semodule -i mypol.pp

Additional Information:
Source Context                system_u:system_r:bumblebee_t:s0
Target Context                system_u:system_r:bumblebee_t:s0
Target Objects                 [ capability ]
Source                        Xorg
Source Path                   /usr/bin/Xorg
Port                          <Unknown>
Host                          (removed)
Source RPM Packages           xorg-x11-server-Xorg-1.14.4-5.fc20.x86_64
Target RPM Packages           
Policy RPM                    selinux-policy-3.12.1-106.fc20.noarch
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Host Name                     (removed)
Platform                      Linux (removed) 3.11.10-301.fc20.x86_64 #1 SMP Thu
                              Dec 5 14:01:17 UTC 2013 x86_64 x86_64
Alert Count                   1
First Seen                    2013-12-18 22:36:02 CST
Last Seen                     2013-12-18 22:36:02 CST
Local ID                      73d2662a-d31d-48b4-b86c-cd61f77cc8ac

Raw Audit Messages
type=AVC msg=audit(1387377362.776:647): avc:  denied  { sys_tty_config } for  pid=5272 comm="Xorg" capability=26  scontext=system_u:system_r:bumblebee_t:s0 tcontext=system_u:system_r:bumblebee_t:s0 tclass=capability


type=SYSCALL msg=audit(1387377362.776:647): arch=x86_64 syscall=ioctl success=yes exit=0 a0=b a1=4b32 a2=2 a3=2 items=0 ppid=1334 pid=5272 auid=4294967295 uid=0 gid=1001 euid=0 suid=0 fsuid=0 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm=Xorg exe=/usr/bin/Xorg subj=system_u:system_r:bumblebee_t:s0 key=(null)

Hash: Xorg,bumblebee_t,bumblebee_t,capability,sys_tty_config

Additional info:
reporter:       libreport-2.1.10
hashmarkername: setroubleshoot
kernel:         3.11.10-301.fc20.x86_64
type:           libreport