Adding Sepolicy rules to allow bluetoothctl and dbus-daemon to access unix stream sockets.

[pebenito]

Required for using acquire-notify, acquire-write options (Gatt Client) and Sending notifications (Gatt Server)

Below are the avc denials that are fixed with this patch -

1. audit: type=1400 audit(315966559.395:444): avc: denied { use } for pid=710 comm="dbus-daemon" path="socket:[13196]" dev="sockfs" ino=13196 scontext=system_u:system_r:system_dbusd_t:s0-s15:c0.c1023 tcontext=system_u:system_r:bluetooth_t:s0-s15:c0.c1023 tclass=fd permissive=0
2. audit: type=1400 audit(315999854.939:523): avc: denied { read write } for pid=812 comm="dbus-daemon" path="socket:[99469]" dev="sockfs" ino=99469 scontext=system_u:system_r:system_dbusd_t:s0-s15:c0.c1023 tcontext=system_u:system_r:bluetooth_t:s0-s15:c0.c1023 tclass=bluetooth_socket permissive=1

Submitted-by: Naga Bhavani Akella quic_nakella@quicinc.com https://lore.kernel.org/selinux-refpolicy/fe989e5b-82f7-406b-8264-6a2734418ba9@quicinc.com/T/#t