sysadm_t running shutdown (systemctl) wants to "open" tty1.

diff --git a/policy/modules/system/userdomain.if b/policy/modules/system/userdomain.if
index 66557b6d82d79feee15dafc4633433e4a422abd2..eba9213144731e5475a57d2a2014e57535e02841 100644 (file)
--- a/policy/modules/system/userdomain.if
+++ b/policy/modules/system/userdomain.if
@@ -1401,6 +1401,7 @@ template(`userdom_admin_user_template',`
        storage_dontaudit_read_fixed_disk($1_t)
 
        term_use_all_inherited_terms($1_t)
+       term_use_unallocated_ttys($1_t)
 
        auth_getattr_shadow($1_t)
        # Manage almost all files