There is no way for this game to end... Not until software developers take over the task of writing policy themselves.Just to inform you that these AVCs have been corrected in selinux- policy-targeted 2.2.9-1. But new hid2hci denied read and write AVCs have appeared. The never-ending game ;-)
I know Dan disagrees with me on this, but I think that this is the only way for selinux to be really accepted into the mainstream. First, however, more infrastructure is needed to make this possible. Modular policy is a step in the right direction. I see that the current strict policy is now modular, and that's good news...