Description of problem:
noted when the power button was pressed i got a bunch of selinux alerts

Version-Release number of selected component (if applicable):
3.14.5-38.fc32

How reproducible:
every boot (unless you create the policy I will outline below)

Steps to Reproduce:
1. Press the power button while logged in
2. note selinux alerts

Actual results:
alerts for loginctl

Expected results:
no alerts

Additional info:

the below policy resolves this issue:

module my-loginctl 1.0;

require {
        type apmd_t;
        type efivarfs_t;
        class dir search;
        class file { open read };
}

#============= apmd_t ==============

#!!!! This avc is allowed in the current policy
allow apmd_t efivarfs_t:dir search;

#!!!! This avc is allowed in the current policy
allow apmd_t efivarfs_t:file read;
allow apmd_t efivarfs_t:file open;