add blocks and macros for gnome applications
more dm/udisks related to me accidentally plugin the cord of my usb storage
pulseaudio (only the session daemon)

this is ugly

consider unconfined and children run pulse without a auto subject type transtion and create shm without a auto file type transition

that means that pa clients need to be able to signal, signull unconfined users, as well as be able to read and delete generic tmpfs files

similar for gdm
I do not confine the /usr/bin/startpa shell scripts

all they do is run pulse and pactl anyway

gsession runs pa and pactl (by running pa start script)
gsd is a pa client