split dev_manage_dri_dev() into a manage and a filetrans interface.

policy/modules/kernel/devices.if

@@ -1431,6 +1431,24 @@ interface(`dev_manage_dri_dev',`
 	')
 
 	manage_chr_files_pattern($1, device_t, dri_device_t)
+')
+
+########################################
+## <summary>
+##	Automatic type transition to the type
+##	for DRI device nodes when created in /dev.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+#
+interface(`dev_filetrans_dri',`
+	gen_require(`
+		type device_t, dri_device_t;
+	')
+
 	filetrans_pattern($1, device_t, dri_device_t, chr_file)
 ')
 

policy/modules/kernel/devices.te

@@ -1,5 +1,5 @@
 
-policy_module(devices, 1.8.0)
+policy_module(devices, 1.8.1)
 
 ########################################
 #

policy/modules/services/xserver.te

@@ -671,6 +671,7 @@ dev_rw_apm_bios(xserver_t)
 dev_rw_agp(xserver_t)
 dev_rw_framebuffer(xserver_t)
 dev_manage_dri_dev(xserver_t)
+dev_filetrans_dri(xserver_t)
 dev_create_generic_dirs(xserver_t)
 dev_setattr_generic_dirs(xserver_t)
 # raw memory access is needed if not using the frame buffer