Merge pull request #1034 from WavyEbuilder/portage-sandbox

portage: grant compile domains getattr on chr_files in /dev

Author: pebenito

policy/modules/admin/portage.if

@@ -149,6 +149,9 @@ interface(`portage_compile_domain',`
 	dev_read_rand($1)
 	dev_read_urand($1)
 
+	# some packages test for nodes in /dev
+	dev_getattr_all_chr_files($1)
+
 	domain_use_interactive_fds($1)
 	domain_dontaudit_read_all_domains_state($1)
 	# SELinux-aware installs doing relabels in the sandbox