dev_manage_generic_chr_files(systemd_t)

Another very coarse one. At some point early on /dev/kmsg is mislabeled
(type device_t) and systemd_t wants to dev_write_kmsg()

To catch similar issues i just allow manage chr file perms on device_t
because systemd_t is pretty much trusted any how and i do not want to be
confronted with this anymore
systemd wanted to list /var/lock but i decided to allow systemd_t to
just read all lock files
Seems the unix_stream_connect for journal client types was not needed
after all

They were for system_t, systemd is using kmsg to stream connect, dgram
sendto to the system i suspect