Description of problem:
When Lirc is configured to use the "default" driver in /etc/lirc/lirc_options.conf, it disables the kernel internal processing of signals as keystrokes (devinput, I guess). It appears to do this by writing to /sys/class/rc/rc0/protocols.

SELinux blocks Lirc from configuring the kernel protocols and when using the "default" driver I get duplicate keys.


Version-Release number of selected component (if applicable):
lirc-compat-0.9.4c-8.fc25.x86_64
lirc-config-0.9.4c-8.fc25.noarch
lirc-core-0.9.4c-8.fc25.x86_64
lirc-doc-0.9.4c-8.fc25.noarch
lirc-drv-ftdi-0.9.4c-8.fc25.x86_64
lirc-drv-portaudio-0.9.4c-8.fc25.x86_64
lirc-libs-0.9.4c-8.fc25.x86_64
lirc-tools-gui-0.9.4c-8.fc25.x86_64
selinux-policy-3.13.1-225.11.fc25.noarch
selinux-policy-targeted-3.13.1-225.11.fc25.noarch


How reproducible:
Deterministic


Steps to Reproduce:
Configure Lirc to use the "default" driver in /etc/lirc/lirc_options.conf

Try and use an application that both processes Lirc input and keyboard inputs.


Actual results:
Duplicate keys

Expected results:
Only the Lirc input should be processed.


Additional info:

The AVCs I get are:

type=AVC msg=audit(1488155185.855:113): avc:  denied  { write } for  pid=776 comm="lircd" name="protocols" dev="sysfs" ino=20350 scontext=system_u:system_r:lircd_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=0
type=AVC msg=audit(1488155185.855:114): avc:  denied  { write } for  pid=776 comm="lircd" name="protocols" dev="sysfs" ino=20350 scontext=system_u:system_r:lircd_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=0


If I create and install the following module, Lirc works as expected:

module lircsysfs 1.0;

require {
	type sysfs_t;
	type lircd_t;
	class file write;
}

#============= lircd_t ==============
allow lircd_t sysfs_t:file write;