[ ... ] So, make sure only 50-udev-default.rules has it's rfkill line and create file 70-gentoo-acl.rules with content of:
SUBSYSTEM=="rfkill", TAG+="udev-acl" This would make it work with ACLs "+" if user is viewed as 'active = TRUE' in `ck-list-sessions` Can someone confirm?