From Debian package 0.2.20100524-9

  * Allow user_t and staff_t consolekit_dbus_chat() access so they can
    determine their session status - necessary to login in KDE sometimes.

Should really go in userdom.

Index: policy/modules/roles/staff.te
===================================================================
--- policy/modules/roles/staff.te.orig
+++ policy/modules/roles/staff.te
@@ -75,6 +75,9 @@
 	optional_policy(`
 		dbus_role_template(staff, staff_r, staff_t)
 	')
+	optional_policy(`
+		consolekit_dbus_chat(staff_t)
+	')
 
 	optional_policy(`
 		evolution_role(staff_r, staff_t)
Index: policy/modules/roles/unprivuser.te
===================================================================
--- policy/modules/roles/unprivuser.te.orig
+++ policy/modules/roles/unprivuser.te
@@ -48,6 +48,9 @@
 	optional_policy(`
 		dbus_role_template(user, user_r, user_t)
 	')
+	optional_policy(`
+		consolekit_dbus_chat(user_t)
+	')
 
 	optional_policy(`
 		evolution_role(user_r, user_t)