Comment # 3 on bug 1207962 from Johannes Segitz

Thanks for the detailed report. The watch permissions are fixed in the policy
currently staged at security:SELinux and on it's way to Factory. But there are
additional issues that I'm addressing in
home:jsegitz:branches:security:SELinux.

I'll ping you here once that's ready for testing