Description of problem:
colord now tracks which seat DBus requests come from, so it can deal with multiseat displays in the correct way.

Version-Release number of selected component (if applicable):
selinux-policy-3.11.1-67.fc18.noarch
colord-0.1.28-1.fc18.x86_64

How reproducible:
Always

Steps to Reproduce:
1. sudo setenforce 1
2. colormgr create-device device temp display

Expected results:

Created device:
Object Path:   /org/freedesktop/ColorManager/devices/device_hughsie_1000
Owner:         hughsie
Created:       February  2 2013, 08:34:45 AM
Modified:      February  2 2013, 08:34:45 AM
Type:          display
Enabled:       Yes
Embedded:      No
Seat:          seat0
Scope:         temp
Colourspace:   unknown
Device ID:     device
Metadata:      OwnerCmdline=colormgr create-device device temp display 

Actual results:

Created device:
Object Path:   /org/freedesktop/ColorManager/devices/device_hughsie_1000
Owner:         hughsie
Created:       February  2 2013, 08:34:45 AM
Modified:      February  2 2013, 08:34:45 AM
Type:          display
Enabled:       Yes
Embedded:      No
Scope:         temp
Colourspace:   unknown
Device ID:     device
Metadata:      OwnerCmdline=colormgr create-device device temp display 

Additional info:
When SELinux is on, I get: (colord:10842): Cd-WARNING **: failed to get session [pid 10955]: Unknown error -13

SELinux is preventing /usr/libexec/colord from getattr access on the file /run/systemd/sessions/2.

*****  Plugin catchall (100. confidence) suggests  ***************************

If you believe that colord should be allowed getattr access on the 2 file by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# grep colord /var/log/audit/audit.log | audit2allow -M mypol
# semodule -i mypol.pp

Additional Information:
Source Context                system_u:system_r:colord_t:s0
Target Context                system_u:object_r:systemd_logind_sessions_t:s0
Target Objects                /run/systemd/sessions/2 [ file ]
Source                        colord
Source Path                   /usr/libexec/colord
Port                          <Unknown>
Host                          hughsie-work.lan
Source RPM Packages           
Target RPM Packages           
Policy RPM                    selinux-policy-3.11.1-67.fc18.noarch
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Permissive
Host Name                     hughsie-work.lan
Platform                      Linux hughsie-work.lan 3.7.2-201.fc18.x86_64 #1
                              SMP Fri Jan 11 22:16:23 UTC 2013 x86_64 x86_64
Alert Count                   4
First Seen                    2013-02-01 17:18:50 GMT
Last Seen                     2013-02-02 08:34:54 GMT
Local ID                      852c46dd-59b2-4c3d-8d17-477c2f23b939

Raw Audit Messages
type=AVC msg=audit(1359794094.571:697): avc:  denied  { getattr } for  pid=20838 comm="colord" path="/run/systemd/sessions/2" dev="tmpfs" ino=164224 scontext=system_u:system_r:colord_t:s0 tcontext=system_u:object_r:systemd_logind_sessions_t:s0 tclass=file


type=SYSCALL msg=audit(1359794094.571:697): arch=x86_64 syscall=fstat success=yes exit=0 a0=e a1=7fff255b8fc0 a2=7fff255b8fc0 a3=238 items=0 ppid=1 pid=20838 auid=4294967295 uid=998 gid=997 euid=998 suid=998 fsuid=998 egid=997 sgid=997 fsgid=997 ses=4294967295 tty=(none) comm=colord exe=2F7573722F6C6962657865632F636F6C6F7264202864656C6574656429 subj=system_u:system_r:colord_t:s0 key=(null)

Hash: colord,colord_t,systemd_logind_sessions_t,file,getattr

audit2allow

#============= colord_t ==============
allow colord_t systemd_logind_sessions_t:file getattr;

audit2allow -R

#============= colord_t ==============
allow colord_t systemd_logind_sessions_t:file getattr;