## <summary>Policy for terminals.</summary>
## <required val="true">
##	Depended on by other required modules.
## </required>

########################################
## <summary>
##	Transform specified type into a pty type.
## </summary>
## <param name="pty_type">
##	<summary>
##	An object type that will applied to a pty.
##	</summary>
## </param>
#
interface(`term_pty',`
	gen_require(`
		attribute ptynode;
		type devpts_t;
	')

	dev_node($1)
	allow $1 devpts_t:filesystem associate;
	typeattribute $1 ptynode;
')

########################################
## <summary>
##	Transform specified type into an user
##	pty type. This allows it to be relabeled via
##	type change by login programs such as ssh.
## </summary>
## <param name="userdomain">
##	<summary>
##	The type of the user domain associated with
##	this pty.
##	</summary>
## </param>
## <param name="object_type">
##	<summary>
##	An object type that will applied to a pty.
##	</summary>
## </param>
#
interface(`term_user_pty',`
	gen_require(`
		attribute server_ptynode;
	')

	term_pty($2)
	type_change $1 server_ptynode:chr_file $2;
')

########################################
## <summary>
##	Transform specified type into a pty type
##	used by login programs, such as sshd.
## </summary>
## <param name="pty_type">
##	<summary>
##	An object type that will applied to a pty.
##	</summary>
## </param>
#
interface(`term_login_pty',`
	gen_require(`
		attribute server_ptynode;
	')

	term_pty($1)
	typeattribute $1 server_ptynode;
')

########################################
## <summary>
##	Transform specified type into a tty type.
## </summary>
## <param name="tty_type">
##	<summary>
##	An object type that will applied to a tty.
##	</summary>
## </param>
#
interface(`term_tty',`
	gen_require(`
		attribute ttynode, serial_device;
		type tty_device_t;
	')

	typeattribute $1 ttynode, serial_device;

	dev_node($1)
')

########################################
## <summary>
##	Transform specified type into a user tty type.
## </summary>
## <param name="domain">
##	<summary>
##	User domain that is related to this tty.
##	</summary>
## </param>
## <param name="tty_type">
##	<summary>
##	An object type that will applied to a tty.
##	</summary>
## </param>
#
interface(`term_user_tty',`
	gen_require(`
		attribute ttynode;
		type console_device_t;
		type tty_device_t;
	')

	term_tty($2)

	type_change $1 tty_device_t:chr_file $2;

	# Debian login is from shadow utils and does not allow resetting the perms.
	# have to fix this!
	ifdef(`distro_debian',`
		type_change $1 ttynode:chr_file $2;
	')

	tunable_policy(`login_console_enabled',`
		# When user logs in from /dev/console, relabel it
		# to user tty type as well.
		type_change $1 console_device_t:chr_file $2;
	')
')

########################################
## <summary>
##	Create the /dev/pts directory.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_create_pty_dir',`
	gen_require(`
		type devpts_t;
	')

	allow $1 devpts_t:dir create_dir_perms;
	dev_filetrans($1, devpts_t, dir, "devpts")
')

########################################
## <summary>
##	Create a pty in the /dev/pts directory.
## </summary>
## <param name="domain">
##	<summary>
##	The type of the process creating the pty.
##	</summary>
## </param>
## <param name="pty_type">
##	<summary>
##	The type of the pty.
##	</summary>
## </param>
#
interface(`term_create_pty',`
	gen_require(`
		type bsdpty_device_t, devpts_t, ptmx_t;
	')

	dev_list_all_dev_nodes($1)
	allow $1 ptmx_t:chr_file rw_file_perms;

	allow $1 devpts_t:dir list_dir_perms;
	allow $1 devpts_t:filesystem getattr;
	dontaudit $1 bsdpty_device_t:chr_file { getattr read write };
	type_transition $1 devpts_t:chr_file $2;
')

########################################
## <summary>
##	Write the console, all
##	ttys and all ptys.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
## <rolecap/>
#
interface(`term_write_all_terms',`
	gen_require(`
		attribute ttynode, ptynode;
		type console_device_t, devpts_t, tty_device_t;
	')

	dev_list_all_dev_nodes($1)
	allow $1 devpts_t:dir list_dir_perms;
	allow $1 { console_device_t tty_device_t ttynode ptynode }:chr_file write_chr_file_perms;
')

########################################
## <summary>
##	Read and write the console, all
##	ttys and all ptys.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
## <rolecap/>
#
interface(`term_use_all_terms',`
	gen_require(`
		attribute ttynode, ptynode;
		type console_device_t, devpts_t, tty_device_t;
	')

	dev_list_all_dev_nodes($1)
	allow $1 devpts_t:dir list_dir_perms;
	allow $1 { devpts_t console_device_t tty_device_t ttynode ptynode }:chr_file rw_chr_file_perms;
')

########################################
## <summary>
##	Read and write the inherited console, all inherited 
##	ttys and ptys.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
## <rolecap/>
#
interface(`term_use_all_inherited_terms',`
	gen_require(`
		attribute ttynode, ptynode;
		type console_device_t, devpts_t, tty_device_t;
	')

	allow $1 { devpts_t console_device_t tty_device_t ttynode ptynode }:chr_file rw_inherited_term_perms;
')

########################################
## <summary>
##	Write to the console.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
## <rolecap/>
#
interface(`term_write_console',`
	gen_require(`
		type console_device_t;
	')

	dev_list_all_dev_nodes($1)
	allow $1 console_device_t:chr_file write_chr_file_perms;
')

########################################
## <summary>
##	Read from the console.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
## <rolecap/>
#
interface(`term_read_console',`
	gen_require(`
		type console_device_t;
	')

	dev_list_all_dev_nodes($1)
	allow $1 console_device_t:chr_file read_chr_file_perms;
')

########################################
## <summary>
##	Do not audit attempts to read from the console.
## </summary>
## <param name="domain">
##	<summary>
##	Domain to not audit.
##	</summary>
## </param>
## <rolecap/>
#
interface(`term_dontaudit_read_console',`
	gen_require(`
		type console_device_t;
	')

	dontaudit $1 console_device_t:chr_file read_chr_file_perms;
')

########################################
## <summary>
##	Read from and write to the console.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_use_console',`
	gen_require(`
		type console_device_t;
	')

	dev_list_all_dev_nodes($1)
	allow $1 console_device_t:chr_file rw_chr_file_perms;
')

########################################
## <summary>
##	Do not audit attemtps to read from
##	or write to the console.
## </summary>
## <param name="domain">
##	<summary>
##	Domain to not audit.
##	</summary>
## </param>
#
interface(`term_dontaudit_use_console',`
	gen_require(`
		type console_device_t;
		type tty_device_t;
	')

	init_dontaudit_use_fds($1)
	dontaudit $1 console_device_t:chr_file rw_inherited_chr_file_perms;
	dontaudit $1 tty_device_t:chr_file rw_inherited_chr_file_perms;
')

########################################
## <summary>
##	Set the attributes of the console
##	device node.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
## <rolecap/>
#
interface(`term_setattr_console',`
	gen_require(`
		type console_device_t;
	')

	dev_list_all_dev_nodes($1)
	allow $1 console_device_t:chr_file setattr;
')

########################################
## <summary>
##	Relabel from and to the console type.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_relabel_console',`
	gen_require(`
		type console_device_t;
	')

	dev_list_all_dev_nodes($1)
	allow $1 console_device_t:chr_file relabel_chr_file_perms;
')

########################################
## <summary>
##	Create the console device (/dev/console).
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_create_console_dev',`
	gen_require(`
		type console_device_t;
	')

	dev_add_entry_generic_dirs($1)
	allow $1 console_device_t:chr_file create;
	allow $1 self:capability mknod;
')

########################################
## <summary>
##	Watch the console device (/dev/console).
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_watch_console_dev',`
	gen_require(`
		type console_device_t;
	')

	allow $1 console_device_t:chr_file watch_chr_file_perms;
')

########################################
## <summary>
##	Watch_reads the console device (/dev/console).
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_watch_reads_console_dev',`
	gen_require(`
		type console_device_t;
	')

	allow $1 console_device_t:chr_file watch_reads_chr_file_perms;
')

########################################
## <summary>
##	Get the attributes of a pty filesystem
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_getattr_pty_fs',`
	gen_require(`
		type devpts_t;
	')

	allow $1 devpts_t:filesystem getattr;
')

########################################
## <summary>
##	Mount a pty filesystem
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_mount_pty_fs',`
	gen_require(`
		type devpts_t;
	')

	allow $1 devpts_t:filesystem mount;
')

########################################
## <summary>
##	Unmount a pty filesystem
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_unmount_pty_fs',`
	gen_require(`
		type devpts_t;
	')

	allow $1 devpts_t:filesystem unmount;
')

########################################
## <summary>
##	Relabel from and to pty filesystem.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_relabel_pty_fs',`
	gen_require(`
		type devpts_t;
	')

	dev_list_all_dev_nodes($1)
	allow $1 devpts_t:filesystem { relabelto relabelfrom };
')

########################################
## <summary>
##	Do not audit attempts to get the
##	attributes of the /dev/pts directory.
## </summary>
## <param name="domain">
##	<summary>
##	Domain to not audit.
##	</summary>
## </param>
#
interface(`term_dontaudit_getattr_pty_dirs',`
	gen_require(`
		type devpts_t;
	')

	dontaudit $1 devpts_t:dir getattr;
')

########################################
## <summary>
##	Search the contents of the /dev/pts directory.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_search_ptys',`
	gen_require(`
		type devpts_t;
	')

	dev_list_all_dev_nodes($1)
	allow $1 devpts_t:dir search_dir_perms;
')

########################################
## <summary>
##	Do not audit attempts to search the
##	contents of the /dev/pts directory.
## </summary>
## <param name="domain">
##	<summary>
##	Domain to not audit.
##	</summary>
## </param>
#
interface(`term_dontaudit_search_ptys',`
	gen_require(`
		type devpts_t;
	')

	dev_dontaudit_list_all_dev_nodes($1)
	dontaudit $1 devpts_t:dir search_dir_perms;
')

########################################
## <summary>
##	Read the /dev/pts directory to
##	list all ptys.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_list_ptys',`
	gen_require(`
		type devpts_t;
	')

	dev_list_all_dev_nodes($1)
	allow $1 devpts_t:dir list_dir_perms;
')

########################################
## <summary>
##	Relabel the /dev/pts directory
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_relabel_ptys_dirs',`
	gen_require(`
		type devpts_t;
	')

	allow $1 devpts_t:dir relabel_dir_perms;
')

########################################
## <summary>
##	Do not audit attempts to read the
##	/dev/pts directory.
## </summary>
## <param name="domain">
##	<summary>
##	Domain to not audit.
##	</summary>
## </param>
#
interface(`term_dontaudit_list_ptys',`
	gen_require(`
		type devpts_t;
	')

	dontaudit $1 devpts_t:dir { getattr search read };
')

########################################
## <summary>
##	Do not audit attempts to create, read,
##	write, or delete the /dev/pts directory.
## </summary>
## <param name="domain">
##	<summary>
##	Domain to not audit.
##	</summary>
## </param>
#
interface(`term_dontaudit_manage_pty_dirs',`
	gen_require(`
		type devpts_t;
	')

	dontaudit $1 devpts_t:dir manage_dir_perms;
')

########################################
## <summary>
##	Get the attributes of generic pty devices.
## </summary>
## <param name="domain">
##	<summary>
##	Domain to allow
##	</summary>
## </param>
#
interface(`term_getattr_generic_ptys',`
	gen_require(`
		type devpts_t;
	')

	allow $1 devpts_t:chr_file getattr;
')
########################################
## <summary>
##	Do not audit attempts to get the attributes
##	of generic pty devices.
## </summary>
## <param name="domain">
##	<summary>
##	Domain to not audit.
##	</summary>
## </param>
#
interface(`term_dontaudit_getattr_generic_ptys',`
	gen_require(`
		type devpts_t;
	')

	dontaudit $1 devpts_t:chr_file getattr;
')
########################################
## <summary>
##	ioctl of generic pty devices.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
# cjp: added for ppp
interface(`term_ioctl_generic_ptys',`
	gen_require(`
		type devpts_t;
	')

	dev_list_all_dev_nodes($1)
	allow $1 devpts_t:dir search;
	allow $1 devpts_t:chr_file ioctl;
')

########################################
## <summary>
##	Allow setting the attributes of
##	generic pty devices.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
# dwalsh: added for rhgb
interface(`term_setattr_generic_ptys',`
	gen_require(`
		type devpts_t;
	')

	allow $1 devpts_t:chr_file setattr;
')

########################################
## <summary>
##	Dontaudit setting the attributes of
##	generic pty devices.
## </summary>
## <param name="domain">
##	<summary>
##	Domain to not audit.
##	</summary>
## </param>
#
# dwalsh: added for rhgb
interface(`term_dontaudit_setattr_generic_ptys',`
	gen_require(`
		type devpts_t;
	')

	dontaudit $1 devpts_t:chr_file setattr;
')

########################################
## <summary>
##	Read and write the generic pty
##	type.  This is generally only used in
##	the targeted policy.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_use_generic_ptys',`
	gen_require(`
		type devpts_t;
	')

	dev_list_all_dev_nodes($1)
	allow $1 devpts_t:dir list_dir_perms;
	allow $1 devpts_t:chr_file { rw_term_perms lock append };
')

########################################
## <summary>
##	Do not audit attempts to read and
##	write the generic pty type.  This is
##	generally only used in the targeted policy.
## </summary>
## <param name="domain">
##	<summary>
##	Domain to not audit.
##	</summary>
## </param>
#
interface(`term_dontaudit_use_generic_ptys',`
	gen_require(`
		type devpts_t;
	')

	init_dontaudit_use_fds($1)
	dontaudit $1 devpts_t:chr_file { getattr read write ioctl };
')

#######################################
## <summary>
##	Set the attributes of the tty device
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_setattr_controlling_term',`
	gen_require(`
		type devtty_t;
	')

	dev_list_all_dev_nodes($1)
	allow $1 devtty_t:chr_file setattr;
')

########################################
## <summary>
##	Read and write the controlling
##	terminal (/dev/tty).
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_use_controlling_term',`
	gen_require(`
		type devtty_t;
	')

	dev_list_all_dev_nodes($1)
	allow $1 devtty_t:chr_file { rw_term_perms lock append };
')

#######################################
## <summary>
##	Get the attributes of the pty multiplexor (/dev/ptmx).
## </summary>
## <param name="domain">
##	<summary>
##	Domain to not audit.
##	</summary>
## </param>
#
interface(`term_getattr_ptmx',`
	gen_require(`
		type ptmx_t;
	')

	allow $1 ptmx_t:chr_file getattr;
')

########################################
## <summary>
##	Do not audit attempts to get attributes
##	on the pty multiplexor (/dev/ptmx).
## </summary>
## <param name="domain">
##	<summary>
##	Domain to not audit.
##	</summary>
## </param>
#
interface(`term_dontaudit_getattr_ptmx',`
	gen_require(`
		type ptmx_t;
	')

	dontaudit $1 ptmx_t:chr_file getattr;
')

########################################
## <summary>
##	Read and write the pty multiplexor (/dev/ptmx).
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_use_ptmx',`
	gen_require(`
		type ptmx_t;
	')

	dev_list_all_dev_nodes($1)
	allow $1 ptmx_t:chr_file rw_file_perms;
')

########################################
## <summary>
##	Do not audit attempts to read and
##	write the pty multiplexor (/dev/ptmx).
## </summary>
## <param name="domain">
##	<summary>
##	Domain to not audit.
##	</summary>
## </param>
#
interface(`term_dontaudit_use_ptmx',`
	gen_require(`
		type ptmx_t;
	')

	dontaudit $1 ptmx_t:chr_file { getattr read write ioctl };
')

########################################
## <summary>
##	Get the attributes of all
##	pty device nodes.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
## <rolecap/>
#
interface(`term_getattr_all_ptys',`
	gen_require(`
		attribute ptynode;
		type devpts_t;
	')

	dev_list_all_dev_nodes($1)
	allow $1 devpts_t:dir list_dir_perms;
	allow $1 ptynode:chr_file getattr;
')

########################################
## <summary>
##	Do not audit attempts to get the
##	attributes of any pty
##	device nodes.
## </summary>
## <param name="domain">
##	<summary>
##	Domain to not audit.
##	</summary>
## </param>
#
interface(`term_dontaudit_getattr_all_ptys',`
	gen_require(`
		attribute ptynode;
	')

	dontaudit $1 ptynode:chr_file getattr;
')

########################################
## <summary>
##	Set the attributes of all
##	pty device nodes.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
## <rolecap/>
#
interface(`term_setattr_all_ptys',`
	gen_require(`
		attribute ptynode;
		type devpts_t;
	')

	dev_list_all_dev_nodes($1)
	allow $1 devpts_t:dir list_dir_perms;
	allow $1 ptynode:chr_file setattr;
')

########################################
## <summary>
##	Relabel to all ptys.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_relabelto_all_ptys',`
	gen_require(`
		attribute ptynode;
	')

	allow $1 ptynode:chr_file relabelto;
')

########################################
## <summary>
##	Write to all ptys.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_write_all_ptys',`
	gen_require(`
		attribute ptynode;
	')

	dev_list_all_dev_nodes($1)
	allow $1 ptynode:chr_file write_chr_file_perms;
')

########################################
## <summary>
##	Read and write all ptys.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
## <rolecap/>
#
interface(`term_use_all_ptys',`
	gen_require(`
		attribute ptynode;
		type devpts_t;
	')

	dev_list_all_dev_nodes($1)
	allow $1 devpts_t:dir list_dir_perms;
	allow $1 ptynode:chr_file { rw_term_perms lock append };
')

########################################
## <summary>
##	Read and write all inherited ptys.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
## <rolecap/>
#
interface(`term_use_all_inherited_ptys',`
	gen_require(`
		attribute ptynode;
		type devpts_t;
	')

	allow $1 ptynode:chr_file { rw_inherited_term_perms lock };
')

########################################
## <summary>
##	Do not audit attempts to read or write any ptys.
## </summary>
## <param name="domain">
##	<summary>
##	Domain to not audit.
##	</summary>
## </param>
#
interface(`term_dontaudit_use_all_ptys',`
	gen_require(`
		attribute ptynode;
	')

	dontaudit $1 ptynode:chr_file { rw_inherited_term_perms lock append };
')

########################################
## <summary>
##	Relabel from and to all pty device nodes.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_relabel_all_ptys',`
	gen_require(`
		attribute ptynode;
		type devpts_t;
	')

	dev_list_all_dev_nodes($1)
	relabel_chr_files_pattern($1, devpts_t, { ptynode devpts_t } )
')

########################################
## <summary>
##	Get the attributes of all user
##	pty device nodes. (Deprecated)
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
## <rolecap/>
#
interface(`term_getattr_all_user_ptys',`
	refpolicywarn(`$0 has been deprecated, use term_getattr_all_ptys() instead.')
	term_getattr_all_ptys($1)
')

########################################
## <summary>
##	Do not audit attempts to get the
##	attributes of any user pty
##	device nodes. (Deprecated)
## </summary>
## <param name="domain">
##	<summary>
##	Domain to not audit.
##	</summary>
## </param>
#
interface(`term_dontaudit_getattr_all_user_ptys',`
	refpolicywarn(`$0 has been deprecated, use term_dontaudit_getattr_all_ptys() instead.')
	term_dontaudit_getattr_all_ptys($1)
')

########################################
## <summary>
##	Set the attributes of all user
##	pty device nodes. (Deprecated)
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
## <rolecap/>
#
interface(`term_setattr_all_user_ptys',`
	refpolicywarn(`$0 has been deprecated, use term_setattr_all_ptys() instead.')
	term_setattr_all_ptys($1)
')

########################################
## <summary>
##	Relabel to all user ptys. (Deprecated)
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_relabelto_all_user_ptys',`
	refpolicywarn(`$0 has been deprecated, use term_relabelto_all_ptys() instead.')
	term_relabelto_all_ptys($1)
')

########################################
## <summary>
##	Write to all user ptys. (Deprecated)
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_write_all_user_ptys',`
	refpolicywarn(`$0 has been deprecated, use term_write_all_ptys() instead.')
	term_write_all_ptys($1)
')

########################################
## <summary>
##	Read and write all user ptys. (Deprecated)
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
## <rolecap/>
#
interface(`term_use_all_user_ptys',`
	refpolicywarn(`$0 has been deprecated, use term_use_all_ptys() instead.')
	term_use_all_ptys($1)
')

########################################
## <summary>
##	Do not audit attempts to read any
##	user ptys. (Deprecated)
## </summary>
## <param name="domain">
##	<summary>
##	Domain to not audit.
##	</summary>
## </param>
#
interface(`term_dontaudit_use_all_user_ptys',`
	refpolicywarn(`$0 has been deprecated, use term_dontaudit_use_all_ptys() instead.')
	term_dontaudit_use_all_ptys($1)
')

########################################
## <summary>
##	Relabel from and to all user
##	user pty device nodes. (Deprecated)
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_relabel_all_user_ptys',`
	refpolicywarn(`$0 has been deprecated, use term_relabel_all_ptys() instead.')
	term_relabel_all_ptys($1)
')

########################################
## <summary>
##	Get the attributes of all unallocated
##	tty device nodes.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
## <rolecap/>
#
interface(`term_getattr_unallocated_ttys',`
	gen_require(`
		type tty_device_t;
	')

	dev_list_all_dev_nodes($1)
	allow $1 tty_device_t:chr_file getattr;
')

########################################
## <summary>
##	Allow open access for all unallocated
##	tty device nodes.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_open_unallocated_ttys',`
	gen_require(`
		type tty_device_t;
	')

	dev_list_all_dev_nodes($1)
	allow $1 tty_device_t:chr_file open;
')



########################################
## <summary>
##	Do not audit attempts to get the attributes
##	of all unallocated tty device nodes.
## </summary>
## <param name="domain">
##	<summary>
##	Domain to not audit.
##	</summary>
## </param>
#
interface(`term_dontaudit_getattr_unallocated_ttys',`
	gen_require(`
		type tty_device_t;
	')

	dontaudit $1 tty_device_t:chr_file getattr;
')

########################################
## <summary>
##	Set the attributes of all unallocated
##	tty device nodes.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
## <rolecap/>
#
interface(`term_setattr_unallocated_ttys',`
	gen_require(`
		type tty_device_t;
	')

	dev_list_all_dev_nodes($1)
	allow $1 tty_device_t:chr_file setattr;
')

########################################
## <summary>
##	Do not audit attempts to set the attributes
##	of unallocated tty device nodes.
## </summary>
## <param name="domain">
##	<summary>
##	Domain to not audit.
##	</summary>
## </param>
#
interface(`term_dontaudit_setattr_unallocated_ttys',`
	gen_require(`
		type tty_device_t;
	')

	dontaudit $1 tty_device_t:chr_file setattr;
')

########################################
## <summary>
##	Do not audit attempts to ioctl
##	unallocated tty device nodes.
## </summary>
## <param name="domain">
##	<summary>
##	Domain to not audit.
##	</summary>
## </param>
#
interface(`term_dontaudit_ioctl_unallocated_ttys',`
	gen_require(`
		type tty_device_t;
	')

	dontaudit $1 tty_device_t:chr_file ioctl;
')

########################################
## <summary>
##	Watch unallocated tty device nodes.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_watch_unallocated_ttys',`
	gen_require(`
		type tty_device_t;
	')

	allow $1 tty_device_t:chr_file watch_chr_file_perms;
')

########################################
## <summary>
##	Watch_reads unallocated tty device nodes.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_watch_reads_unallocated_ttys',`
	gen_require(`
		type tty_device_t;
	')

	allow $1 tty_device_t:chr_file watch_reads_chr_file_perms;
')

########################################
## <summary>
##	Relabel from and to the unallocated
##	tty type.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_relabel_unallocated_ttys',`
	gen_require(`
		type tty_device_t;
	')

	dev_list_all_dev_nodes($1)
	allow $1 tty_device_t:chr_file relabel_chr_file_perms;
')

########################################
## <summary>
##	Mounton unallocated tty device nodes.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
## <rolecap/>
#
interface(`term_mounton_unallocated_ttys',`
	gen_require(`
		type tty_device_t;
	')

	allow $1 tty_device_t:chr_file mounton;
')

########################################
## <summary>
##	Relabel from all user tty types to
##	the unallocated tty type.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_reset_tty_labels',`
	gen_require(`
		attribute ttynode;
		type tty_device_t;
	')

	dev_list_all_dev_nodes($1)
	allow $1 ttynode:chr_file relabelfrom;
	allow $1 tty_device_t:chr_file relabelto;
')

########################################
## <summary>
##	Append to unallocated ttys.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_append_unallocated_ttys',`
	gen_require(`
		type tty_device_t;
	')

	dev_list_all_dev_nodes($1)
	allow $1 tty_device_t:chr_file append_chr_file_perms;
')

########################################
## <summary>
##	Write to unallocated ttys.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_write_unallocated_ttys',`
	gen_require(`
		type tty_device_t;
	')

	dev_list_all_dev_nodes($1)
	allow $1 tty_device_t:chr_file write_chr_file_perms;
')

########################################
## <summary>
##	Read and write unallocated ttys.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
## <rolecap/>
#
interface(`term_use_unallocated_ttys',`
	gen_require(`
		type tty_device_t;
	')

	dev_list_all_dev_nodes($1)
	allow $1 tty_device_t:chr_file rw_chr_file_perms;
')

########################################
## <summary>
##	Do not audit attempts to read or
##	write unallocated ttys.
## </summary>
## <param name="domain">
##	<summary>
##	Domain to not audit.
##	</summary>
## </param>
#
interface(`term_dontaudit_use_unallocated_ttys',`
	gen_require(`
		type tty_device_t;
	')

	init_dontaudit_use_fds($1)
	dontaudit $1 tty_device_t:chr_file rw_inherited_chr_file_perms;
')

########################################
## <summary>
##	Read and write USB tty character
##	device nodes.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_use_usb_ttys',`
	gen_require(`
		type usbtty_device_t;
	')

	dev_list_all_dev_nodes($1)
	allow $1 usbtty_device_t:chr_file rw_chr_file_perms;
')

#######################################
## <summary>
##  Setattr on USB tty character
##  device nodes.
## </summary>
## <param name="domain">
##  <summary>
##  Domain allowed access.
##  </summary>
## </param>
#
interface(`term_setattr_usb_ttys',`
    gen_require(`
        type usbtty_device_t;
    ')

    allow $1 usbtty_device_t:chr_file setattr;
')

########################################
## <summary>
##	Get the attributes of all tty device nodes.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
## <rolecap/>
#
interface(`term_getattr_all_ttys',`
	gen_require(`
		type tty_device_t;
		attribute ttynode;
	')

	dev_list_all_dev_nodes($1)
	allow $1 ttynode:chr_file getattr;
	allow $1 tty_device_t:chr_file getattr;
')

########################################
## <summary>
##	Do not audit attempts to get the
##	attributes of any tty device nodes.
## </summary>
## <param name="domain">
##	<summary>
##	Domain to not audit.
##	</summary>
## </param>
#
interface(`term_dontaudit_getattr_all_ttys',`
	gen_require(`
		attribute ttynode;
		type tty_device_t;
	')

	dev_list_all_dev_nodes($1)
	dontaudit $1 ttynode:chr_file getattr;
	dontaudit $1 tty_device_t:chr_file getattr;
')

########################################
## <summary>
##	Set the attributes of all tty device nodes.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
## <rolecap/>
#
interface(`term_setattr_all_ttys',`
	gen_require(`
		attribute ttynode;
	')

	dev_list_all_dev_nodes($1)
	allow $1 ttynode:chr_file setattr;
')

########################################
## <summary>
##	Relabel from and to all tty device nodes.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_relabel_all_ttys',`
	gen_require(`
		attribute ttynode;
	')

	dev_list_all_dev_nodes($1)
	allow $1 ttynode:chr_file relabel_chr_file_perms;
')

########################################
## <summary>
##	Write to all ttys.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_write_all_ttys',`
	gen_require(`
		attribute ttynode;
	')

	dev_list_all_dev_nodes($1)
	allow $1 ttynode:chr_file write_chr_file_perms;
')

########################################
## <summary>
##	Read and write all ttys.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
## <rolecap/>
#
interface(`term_use_all_ttys',`
	gen_require(`
		attribute ttynode;
	')

	dev_list_all_dev_nodes($1)
	allow $1 ttynode:chr_file rw_term_perms;
')

########################################
## <summary>
##	Read and write all inherited ttys.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
## <rolecap/>
#
interface(`term_use_all_inherited_ttys',`
	gen_require(`
		attribute ttynode;
	')

	dev_list_all_dev_nodes($1)
	allow $1 ttynode:chr_file rw_inherited_term_perms;
')

########################################
## <summary>
##	Do not audit attempts to read or write
##	any ttys.
## </summary>
## <param name="domain">
##	<summary>
##	Domain to not audit.
##	</summary>
## </param>
#
interface(`term_dontaudit_use_all_ttys',`
	gen_require(`
		attribute ttynode;
	')

	dontaudit $1 ttynode:chr_file rw_inherited_chr_file_perms;
')

########################################
## <summary>
##	Get the attributes of all user tty
##	device nodes. (Deprecated)
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
## <rolecap/>
#
interface(`term_getattr_all_user_ttys',`
	refpolicywarn(`$0() is deprecated, use term_getattr_all_ttys() instead.')
	term_getattr_all_ttys($1)
')

########################################
## <summary>
##	Do not audit attempts to get the
##	attributes of any user tty
##	device nodes. (Deprecated)
## </summary>
## <param name="domain">
##	<summary>
##	Domain to not audit.
##	</summary>
## </param>
#
interface(`term_dontaudit_getattr_all_user_ttys',`
	refpolicywarn(`$0() is deprecated, use term_dontaudit_getattr_all_ttys() instead.')
	term_dontaudit_getattr_all_ttys($1)
')

########################################
## <summary>
##	Set the attributes of all user tty
##	device nodes. (Deprecated)
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
## <rolecap/>
#
interface(`term_setattr_all_user_ttys',`
	refpolicywarn(`$0() is deprecated, use term_setattr_all_ttys() instead.')
	term_setattr_all_ttys($1)
')

########################################
## <summary>
##	Relabel from and to all user
##	user tty device nodes. (Deprecated)
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_relabel_all_user_ttys',`
	refpolicywarn(`$0() is deprecated, use term_relabel_all_ttys() instead.')
	term_relabel_all_ttys($1)
')

########################################
## <summary>
##	Write to all user ttys. (Deprecated)
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_write_all_user_ttys',`
	refpolicywarn(`$0() is deprecated, use term_write_all_ttys() instead.')
	term_write_all_ttys($1)
')

########################################
## <summary>
##	Read and write all user to all user ttys. (Deprecated)
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
## <rolecap/>
#
interface(`term_use_all_user_ttys',`
	refpolicywarn(`$0() is deprecated, use term_use_all_ttys() instead.')
	term_use_all_ttys($1)
')

########################################
## <summary>
##	Do not audit attempts to read or write
##	any user ttys. (Deprecated)
## </summary>
## <param name="domain">
##	<summary>
##	Domain to not audit.
##	</summary>
## </param>
#
interface(`term_dontaudit_use_all_user_ttys',`
	refpolicywarn(`$0() is deprecated, use term_dontaudit_use_all_ttys() instead.')
	term_dontaudit_use_all_ttys($1)
')

########################################
## <summary>
##	Watch user tty device nodes.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_watch_user_ttys',`
	gen_require(`
		type user_tty_device_t;
	')

	allow $1 user_tty_device_t:chr_file watch_chr_file_perms;
')

########################################
## <summary>
##	Watch_reads user tty device nodes.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`term_watch_reads_user_ttys',`
	gen_require(`
		type user_tty_device_t;
	')

	allow $1 user_tty_device_t:chr_file watch_reads_chr_file_perms;
')

####################################
## <summary>
##      Getattr on the virtio console.
## </summary>
## <param name="domain">
##      <summary>
##      Domain allowed access.
##      </summary>
## </param>
#
interface(`term_getattr_virtio_console',`
        gen_require(`
                type virtio_device_t;
        ')

        allow $1 virtio_device_t:chr_file getattr_chr_file_perms;
')

#####################################
## <summary>
##      Read from and write to the virtio console.
## </summary>
## <param name="domain">
##      <summary>
##      Domain allowed access.
##      </summary>
## </param>
#
interface(`term_use_virtio_console',`
        gen_require(`
                type virtio_device_t;
        ')

        dev_list_all_dev_nodes($1)
        allow $1 virtio_device_t:chr_file rw_chr_file_perms;
')

########################################
## <summary>
##	Create all named term devices with the correct label
## </summary>
## <param name="domain">
##	<summary>
##      Domain allowed access.
##	</summary>
## </param>
#
interface(`term_filetrans_all_named_dev',`

    gen_require(`
	    type tty_device_t;
	    type bsdpty_device_t;
	    type console_device_t;
	    type ptmx_t;
    	type devtty_t;
	    type virtio_device_t;
	    type devpts_t;
	    type usbtty_device_t;
    ')

	dev_filetrans($1, devtty_t, chr_file, "tty")
	dev_filetrans($1, tty_device_t, chr_file, "tty0")
	dev_filetrans($1, tty_device_t, chr_file, "tty1")
	dev_filetrans($1, tty_device_t, chr_file, "tty2")
	dev_filetrans($1, tty_device_t, chr_file, "tty3")
	dev_filetrans($1, tty_device_t, chr_file, "tty4")
	dev_filetrans($1, tty_device_t, chr_file, "tty5")
	dev_filetrans($1, tty_device_t, chr_file, "tty6")
	dev_filetrans($1, tty_device_t, chr_file, "tty7")
	dev_filetrans($1, tty_device_t, chr_file, "tty8")
	dev_filetrans($1, tty_device_t, chr_file, "tty9")
	dev_filetrans($1, tty_device_t, chr_file, "tty10")
	dev_filetrans($1, tty_device_t, chr_file, "tty11")
	dev_filetrans($1, tty_device_t, chr_file, "tty12")
	dev_filetrans($1, tty_device_t, chr_file, "tty13")
	dev_filetrans($1, tty_device_t, chr_file, "tty14")
	dev_filetrans($1, tty_device_t, chr_file, "tty15")
	dev_filetrans($1, tty_device_t, chr_file, "tty16")
	dev_filetrans($1, tty_device_t, chr_file, "tty17")
	dev_filetrans($1, tty_device_t, chr_file, "tty18")
	dev_filetrans($1, tty_device_t, chr_file, "tty19")
	dev_filetrans($1, tty_device_t, chr_file, "tty20")
	dev_filetrans($1, tty_device_t, chr_file, "tty21")
	dev_filetrans($1, tty_device_t, chr_file, "tty22")
	dev_filetrans($1, tty_device_t, chr_file, "tty23")
	dev_filetrans($1, tty_device_t, chr_file, "tty24")
	dev_filetrans($1, tty_device_t, chr_file, "tty25")
	dev_filetrans($1, tty_device_t, chr_file, "tty26")
	dev_filetrans($1, tty_device_t, chr_file, "tty27")
	dev_filetrans($1, tty_device_t, chr_file, "tty28")
	dev_filetrans($1, tty_device_t, chr_file, "tty29")
	dev_filetrans($1, tty_device_t, chr_file, "tty30")
	dev_filetrans($1, tty_device_t, chr_file, "tty31")
	dev_filetrans($1, tty_device_t, chr_file, "tty32")
	dev_filetrans($1, tty_device_t, chr_file, "tty33")
	dev_filetrans($1, tty_device_t, chr_file, "tty34")
	dev_filetrans($1, tty_device_t, chr_file, "tty35")
	dev_filetrans($1, tty_device_t, chr_file, "tty36")
	dev_filetrans($1, tty_device_t, chr_file, "tty37")
	dev_filetrans($1, tty_device_t, chr_file, "tty38")
	dev_filetrans($1, tty_device_t, chr_file, "tty39")
	dev_filetrans($1, tty_device_t, chr_file, "tty40")
	dev_filetrans($1, tty_device_t, chr_file, "tty41")
	dev_filetrans($1, tty_device_t, chr_file, "tty42")
	dev_filetrans($1, tty_device_t, chr_file, "tty43")
	dev_filetrans($1, tty_device_t, chr_file, "tty44")
	dev_filetrans($1, tty_device_t, chr_file, "tty45")
	dev_filetrans($1, tty_device_t, chr_file, "tty46")
	dev_filetrans($1, tty_device_t, chr_file, "tty47")
	dev_filetrans($1, tty_device_t, chr_file, "tty48")
	dev_filetrans($1, tty_device_t, chr_file, "tty49")
	dev_filetrans($1, tty_device_t, chr_file, "tty50")
	dev_filetrans($1, tty_device_t, chr_file, "tty51")
	dev_filetrans($1, tty_device_t, chr_file, "tty52")
	dev_filetrans($1, tty_device_t, chr_file, "tty53")
	dev_filetrans($1, tty_device_t, chr_file, "tty54")
	dev_filetrans($1, tty_device_t, chr_file, "tty55")
	dev_filetrans($1, tty_device_t, chr_file, "tty56")
	dev_filetrans($1, tty_device_t, chr_file, "tty57")
	dev_filetrans($1, tty_device_t, chr_file, "tty58")
	dev_filetrans($1, tty_device_t, chr_file, "tty59")
	dev_filetrans($1, tty_device_t, chr_file, "tty60")
	dev_filetrans($1, tty_device_t, chr_file, "tty61")
	dev_filetrans($1, tty_device_t, chr_file, "tty62")
	dev_filetrans($1, tty_device_t, chr_file, "tty63")
	dev_filetrans($1, tty_device_t, chr_file, "tty64")
	dev_filetrans($1, tty_device_t, chr_file, "tty65")
	dev_filetrans($1, tty_device_t, chr_file, "tty66")
	dev_filetrans($1, tty_device_t, chr_file, "tty67")
	dev_filetrans($1, tty_device_t, chr_file, "tty68")
	dev_filetrans($1, tty_device_t, chr_file, "tty69")
	dev_filetrans($1, tty_device_t, chr_file, "tty70")
	dev_filetrans($1, tty_device_t, chr_file, "tty71")
	dev_filetrans($1, tty_device_t, chr_file, "tty72")
	dev_filetrans($1, tty_device_t, chr_file, "tty73")
	dev_filetrans($1, tty_device_t, chr_file, "tty74")
	dev_filetrans($1, tty_device_t, chr_file, "tty75")
	dev_filetrans($1, tty_device_t, chr_file, "tty76")
	dev_filetrans($1, tty_device_t, chr_file, "tty77")
	dev_filetrans($1, tty_device_t, chr_file, "tty78")
	dev_filetrans($1, tty_device_t, chr_file, "tty79")
	dev_filetrans($1, tty_device_t, chr_file, "tty80")
	dev_filetrans($1, tty_device_t, chr_file, "tty81")
	dev_filetrans($1, tty_device_t, chr_file, "tty82")
	dev_filetrans($1, tty_device_t, chr_file, "tty83")
	dev_filetrans($1, tty_device_t, chr_file, "tty84")
	dev_filetrans($1, tty_device_t, chr_file, "tty85")
	dev_filetrans($1, tty_device_t, chr_file, "tty86")
	dev_filetrans($1, tty_device_t, chr_file, "tty87")
	dev_filetrans($1, tty_device_t, chr_file, "tty88")
	dev_filetrans($1, tty_device_t, chr_file, "tty89")
	dev_filetrans($1, tty_device_t, chr_file, "tty90")
	dev_filetrans($1, tty_device_t, chr_file, "tty91")
	dev_filetrans($1, tty_device_t, chr_file, "tty92")
	dev_filetrans($1, tty_device_t, chr_file, "tty93")
	dev_filetrans($1, tty_device_t, chr_file, "tty94")
	dev_filetrans($1, tty_device_t, chr_file, "tty95")
	dev_filetrans($1, tty_device_t, chr_file, "tty96")
	dev_filetrans($1, tty_device_t, chr_file, "tty97")
	dev_filetrans($1, tty_device_t, chr_file, "tty98")
	dev_filetrans($1, tty_device_t, chr_file, "tty99")
	dev_filetrans($1, tty_device_t, chr_file, "pty")
	dev_filetrans($1, tty_device_t, chr_file, "pty0")
	dev_filetrans($1, tty_device_t, chr_file, "pty1")
	dev_filetrans($1, tty_device_t, chr_file, "pty2")
	dev_filetrans($1, tty_device_t, chr_file, "pty3")
	dev_filetrans($1, tty_device_t, chr_file, "pty4")
	dev_filetrans($1, tty_device_t, chr_file, "pty5")
	dev_filetrans($1, tty_device_t, chr_file, "pty6")
	dev_filetrans($1, tty_device_t, chr_file, "pty7")
	dev_filetrans($1, tty_device_t, chr_file, "pty8")
	dev_filetrans($1, tty_device_t, chr_file, "pty9")
	dev_filetrans($1, tty_device_t, chr_file, "pty10")
	dev_filetrans($1, tty_device_t, chr_file, "pty11")
	dev_filetrans($1, tty_device_t, chr_file, "pty12")
	dev_filetrans($1, tty_device_t, chr_file, "pty13")
	dev_filetrans($1, tty_device_t, chr_file, "pty14")
	dev_filetrans($1, tty_device_t, chr_file, "pty15")
	dev_filetrans($1, tty_device_t, chr_file, "pty16")
	dev_filetrans($1, tty_device_t, chr_file, "pty17")
	dev_filetrans($1, tty_device_t, chr_file, "pty18")
	dev_filetrans($1, tty_device_t, chr_file, "pty19")
	dev_filetrans($1, tty_device_t, chr_file, "pty20")
	dev_filetrans($1, tty_device_t, chr_file, "pty21")
	dev_filetrans($1, tty_device_t, chr_file, "pty22")
	dev_filetrans($1, tty_device_t, chr_file, "pty23")
	dev_filetrans($1, tty_device_t, chr_file, "pty24")
	dev_filetrans($1, tty_device_t, chr_file, "pty25")
	dev_filetrans($1, tty_device_t, chr_file, "pty26")
	dev_filetrans($1, tty_device_t, chr_file, "pty27")
	dev_filetrans($1, tty_device_t, chr_file, "pty28")
	dev_filetrans($1, tty_device_t, chr_file, "pty29")
	dev_filetrans($1, tty_device_t, chr_file, "pty30")
	dev_filetrans($1, tty_device_t, chr_file, "pty31")
	dev_filetrans($1, tty_device_t, chr_file, "pty32")
	dev_filetrans($1, tty_device_t, chr_file, "pty33")
	dev_filetrans($1, tty_device_t, chr_file, "pty34")
	dev_filetrans($1, tty_device_t, chr_file, "pty35")
	dev_filetrans($1, tty_device_t, chr_file, "pty36")
	dev_filetrans($1, tty_device_t, chr_file, "pty37")
	dev_filetrans($1, tty_device_t, chr_file, "pty38")
	dev_filetrans($1, tty_device_t, chr_file, "pty39")
	dev_filetrans($1, tty_device_t, chr_file, "pty40")
	dev_filetrans($1, tty_device_t, chr_file, "pty41")
	dev_filetrans($1, tty_device_t, chr_file, "pty42")
	dev_filetrans($1, tty_device_t, chr_file, "pty43")
	dev_filetrans($1, tty_device_t, chr_file, "pty44")
	dev_filetrans($1, tty_device_t, chr_file, "pty45")
	dev_filetrans($1, tty_device_t, chr_file, "pty46")
	dev_filetrans($1, tty_device_t, chr_file, "pty47")
	dev_filetrans($1, tty_device_t, chr_file, "pty48")
	dev_filetrans($1, tty_device_t, chr_file, "pty49")
	dev_filetrans($1, tty_device_t, chr_file, "pty50")
	dev_filetrans($1, tty_device_t, chr_file, "pty51")
	dev_filetrans($1, tty_device_t, chr_file, "pty52")
	dev_filetrans($1, tty_device_t, chr_file, "pty53")
	dev_filetrans($1, tty_device_t, chr_file, "pty54")
	dev_filetrans($1, tty_device_t, chr_file, "pty55")
	dev_filetrans($1, tty_device_t, chr_file, "pty56")
	dev_filetrans($1, tty_device_t, chr_file, "pty57")
	dev_filetrans($1, tty_device_t, chr_file, "pty58")
	dev_filetrans($1, tty_device_t, chr_file, "pty59")
	dev_filetrans($1, tty_device_t, chr_file, "pty60")
	dev_filetrans($1, tty_device_t, chr_file, "pty61")
	dev_filetrans($1, tty_device_t, chr_file, "pty62")
	dev_filetrans($1, tty_device_t, chr_file, "pty63")
	dev_filetrans($1, tty_device_t, chr_file, "pty64")
	dev_filetrans($1, tty_device_t, chr_file, "pty65")
	dev_filetrans($1, tty_device_t, chr_file, "pty66")
	dev_filetrans($1, tty_device_t, chr_file, "pty67")
	dev_filetrans($1, tty_device_t, chr_file, "pty68")
	dev_filetrans($1, tty_device_t, chr_file, "pty69")
	dev_filetrans($1, tty_device_t, chr_file, "pty70")
	dev_filetrans($1, tty_device_t, chr_file, "pty71")
	dev_filetrans($1, tty_device_t, chr_file, "pty72")
	dev_filetrans($1, tty_device_t, chr_file, "pty73")
	dev_filetrans($1, tty_device_t, chr_file, "pty74")
	dev_filetrans($1, tty_device_t, chr_file, "pty75")
	dev_filetrans($1, tty_device_t, chr_file, "pty76")
	dev_filetrans($1, tty_device_t, chr_file, "pty77")
	dev_filetrans($1, tty_device_t, chr_file, "pty78")
	dev_filetrans($1, tty_device_t, chr_file, "pty79")
	dev_filetrans($1, tty_device_t, chr_file, "pty80")
	dev_filetrans($1, tty_device_t, chr_file, "pty81")
	dev_filetrans($1, tty_device_t, chr_file, "pty82")
	dev_filetrans($1, tty_device_t, chr_file, "pty83")
	dev_filetrans($1, tty_device_t, chr_file, "pty84")
	dev_filetrans($1, tty_device_t, chr_file, "pty85")
	dev_filetrans($1, tty_device_t, chr_file, "pty86")
	dev_filetrans($1, tty_device_t, chr_file, "pty87")
	dev_filetrans($1, tty_device_t, chr_file, "pty88")
	dev_filetrans($1, tty_device_t, chr_file, "pty89")
	dev_filetrans($1, tty_device_t, chr_file, "pty90")
	dev_filetrans($1, tty_device_t, chr_file, "pty91")
	dev_filetrans($1, tty_device_t, chr_file, "pty92")
	dev_filetrans($1, tty_device_t, chr_file, "pty93")
	dev_filetrans($1, tty_device_t, chr_file, "pty94")
	dev_filetrans($1, tty_device_t, chr_file, "pty95")
	dev_filetrans($1, tty_device_t, chr_file, "pty96")
	dev_filetrans($1, tty_device_t, chr_file, "pty97")
	dev_filetrans($1, tty_device_t, chr_file, "pty98")
	dev_filetrans($1, tty_device_t, chr_file, "pty99")
	dev_filetrans($1, tty_device_t, chr_file, "adb0")
	dev_filetrans($1, tty_device_t, chr_file, "adb1")
	dev_filetrans($1, tty_device_t, chr_file, "adb2")
	dev_filetrans($1, tty_device_t, chr_file, "adb3")
	dev_filetrans($1, tty_device_t, chr_file, "adb4")
	dev_filetrans($1, tty_device_t, chr_file, "adb5")
	dev_filetrans($1, tty_device_t, chr_file, "adb6")
	dev_filetrans($1, tty_device_t, chr_file, "adb7")
	dev_filetrans($1, tty_device_t, chr_file, "adb8")
	dev_filetrans($1, tty_device_t, chr_file, "adb9")
	dev_filetrans($1, tty_device_t, chr_file, "capi0")
	dev_filetrans($1, tty_device_t, chr_file, "capi1")
	dev_filetrans($1, tty_device_t, chr_file, "capi2")
	dev_filetrans($1, tty_device_t, chr_file, "capi3")
	dev_filetrans($1, tty_device_t, chr_file, "capi4")
	dev_filetrans($1, tty_device_t, chr_file, "capi5")
	dev_filetrans($1, tty_device_t, chr_file, "capi6")
	dev_filetrans($1, tty_device_t, chr_file, "capi7")
	dev_filetrans($1, tty_device_t, chr_file, "capi8")
	dev_filetrans($1, tty_device_t, chr_file, "capi9")
	dev_filetrans($1, console_device_t, chr_file, "console")
	dev_filetrans($1, tty_device_t, chr_file, "cu0")
	dev_filetrans($1, tty_device_t, chr_file, "cu1")
	dev_filetrans($1, tty_device_t, chr_file, "cu2")
	dev_filetrans($1, tty_device_t, chr_file, "cu3")
	dev_filetrans($1, tty_device_t, chr_file, "cu4")
	dev_filetrans($1, tty_device_t, chr_file, "cu5")
	dev_filetrans($1, tty_device_t, chr_file, "cu6")
	dev_filetrans($1, tty_device_t, chr_file, "cu7")
	dev_filetrans($1, tty_device_t, chr_file, "cu8")
	dev_filetrans($1, tty_device_t, chr_file, "cu9")
	dev_filetrans($1, tty_device_t, chr_file, "dcbri0")
	dev_filetrans($1, tty_device_t, chr_file, "dcbri1")
	dev_filetrans($1, tty_device_t, chr_file, "dcbri2")
	dev_filetrans($1, tty_device_t, chr_file, "dcbri3")
	dev_filetrans($1, tty_device_t, chr_file, "dcbri4")
	dev_filetrans($1, tty_device_t, chr_file, "dcbri5")
	dev_filetrans($1, tty_device_t, chr_file, "dcbri6")
	dev_filetrans($1, tty_device_t, chr_file, "dcbri7")
	dev_filetrans($1, tty_device_t, chr_file, "dcbri8")
	dev_filetrans($1, tty_device_t, chr_file, "dcbri9")
	dev_filetrans($1, tty_device_t, chr_file, "vcsa")
	dev_filetrans($1, tty_device_t, chr_file, "vcsb")
	dev_filetrans($1, tty_device_t, chr_file, "vcsc")
	dev_filetrans($1, tty_device_t, chr_file, "vcsd")
	dev_filetrans($1, tty_device_t, chr_file, "vcse")
	dev_filetrans($1, tty_device_t, chr_file, "hvc0")
	dev_filetrans($1, tty_device_t, chr_file, "hvc1")
	dev_filetrans($1, tty_device_t, chr_file, "hvc2")
	dev_filetrans($1, tty_device_t, chr_file, "hvc3")
	dev_filetrans($1, tty_device_t, chr_file, "hvc4")
	dev_filetrans($1, tty_device_t, chr_file, "hvc5")
	dev_filetrans($1, tty_device_t, chr_file, "hvc6")
	dev_filetrans($1, tty_device_t, chr_file, "hvc7")
	dev_filetrans($1, tty_device_t, chr_file, "hvc8")
	dev_filetrans($1, tty_device_t, chr_file, "hvc9")
	dev_filetrans($1, tty_device_t, chr_file, "hvsi0")
	dev_filetrans($1, tty_device_t, chr_file, "hvsi1")
	dev_filetrans($1, tty_device_t, chr_file, "hvsi2")
	dev_filetrans($1, tty_device_t, chr_file, "hvsi3")
	dev_filetrans($1, tty_device_t, chr_file, "hvsi4")
	dev_filetrans($1, tty_device_t, chr_file, "hvsi5")
	dev_filetrans($1, tty_device_t, chr_file, "hvsi6")
	dev_filetrans($1, tty_device_t, chr_file, "hvsi7")
	dev_filetrans($1, tty_device_t, chr_file, "hvsi8")
	dev_filetrans($1, tty_device_t, chr_file, "hvsi9")
	dev_filetrans($1, tty_device_t, chr_file, "ircomm0")
	dev_filetrans($1, tty_device_t, chr_file, "ircomm1")
	dev_filetrans($1, tty_device_t, chr_file, "ircomm2")
	dev_filetrans($1, tty_device_t, chr_file, "ircomm3")
	dev_filetrans($1, tty_device_t, chr_file, "ircomm4")
	dev_filetrans($1, tty_device_t, chr_file, "ircomm5")
	dev_filetrans($1, tty_device_t, chr_file, "ircomm6")
	dev_filetrans($1, tty_device_t, chr_file, "ircomm7")
	dev_filetrans($1, tty_device_t, chr_file, "ircomm8")
	dev_filetrans($1, tty_device_t, chr_file, "ircomm9")
	dev_filetrans($1, tty_device_t, chr_file, "isdn0")
	dev_filetrans($1, tty_device_t, chr_file, "isdn1")
	dev_filetrans($1, tty_device_t, chr_file, "isdn2")
	dev_filetrans($1, tty_device_t, chr_file, "isdn3")
	dev_filetrans($1, tty_device_t, chr_file, "isdn4")
	dev_filetrans($1, tty_device_t, chr_file, "isdn5")
	dev_filetrans($1, tty_device_t, chr_file, "isdn6")
	dev_filetrans($1, tty_device_t, chr_file, "isdn7")
	dev_filetrans($1, tty_device_t, chr_file, "isdn8")
	dev_filetrans($1, tty_device_t, chr_file, "isdn9")
	filetrans_pattern($1, devpts_t, ptmx_t, chr_file, "ptmx")
	dev_filetrans($1, ptmx_t, chr_file, "ptmx")
	dev_filetrans($1, tty_device_t, chr_file, "rfcomm0")
	dev_filetrans($1, tty_device_t, chr_file, "rfcomm1")
	dev_filetrans($1, tty_device_t, chr_file, "rfcomm2")
	dev_filetrans($1, tty_device_t, chr_file, "rfcomm3")
	dev_filetrans($1, tty_device_t, chr_file, "rfcomm4")
	dev_filetrans($1, tty_device_t, chr_file, "rfcomm5")
	dev_filetrans($1, tty_device_t, chr_file, "rfcomm6")
	dev_filetrans($1, tty_device_t, chr_file, "rfcomm7")
	dev_filetrans($1, tty_device_t, chr_file, "rfcomm8")
	dev_filetrans($1, tty_device_t, chr_file, "rfcomm9")
	dev_filetrans($1, tty_device_t, chr_file, "slamr0")
	dev_filetrans($1, tty_device_t, chr_file, "slamr1")
	dev_filetrans($1, tty_device_t, chr_file, "slamr2")
	dev_filetrans($1, tty_device_t, chr_file, "slamr3")
	dev_filetrans($1, tty_device_t, chr_file, "slamr4")
	dev_filetrans($1, tty_device_t, chr_file, "slamr5")
	dev_filetrans($1, tty_device_t, chr_file, "slamr6")
	dev_filetrans($1, tty_device_t, chr_file, "slamr7")
	dev_filetrans($1, tty_device_t, chr_file, "slamr8")
	dev_filetrans($1, tty_device_t, chr_file, "slamr9")
	dev_filetrans($1, tty_device_t, chr_file, "ttyACM0")
	dev_filetrans($1, tty_device_t, chr_file, "ttyACM1")
	dev_filetrans($1, tty_device_t, chr_file, "ttyACM2")
	dev_filetrans($1, tty_device_t, chr_file, "ttyACM3")
	dev_filetrans($1, tty_device_t, chr_file, "ttyACM4")
	dev_filetrans($1, tty_device_t, chr_file, "ttyACM5")
	dev_filetrans($1, tty_device_t, chr_file, "ttyACM6")
	dev_filetrans($1, tty_device_t, chr_file, "ttyACM7")
	dev_filetrans($1, tty_device_t, chr_file, "ttyACM8")
	dev_filetrans($1, tty_device_t, chr_file, "ttyACM9")
	dev_filetrans($1, tty_device_t, chr_file, "ttyS0")
	dev_filetrans($1, tty_device_t, chr_file, "ttyS1")
	dev_filetrans($1, tty_device_t, chr_file, "ttyS2")
	dev_filetrans($1, tty_device_t, chr_file, "ttyS3")
	dev_filetrans($1, tty_device_t, chr_file, "ttyS4")
	dev_filetrans($1, tty_device_t, chr_file, "ttyS5")
	dev_filetrans($1, tty_device_t, chr_file, "ttyS6")
	dev_filetrans($1, tty_device_t, chr_file, "ttyS7")
	dev_filetrans($1, tty_device_t, chr_file, "ttyS8")
	dev_filetrans($1, tty_device_t, chr_file, "ttyS9")
	dev_filetrans($1, tty_device_t, chr_file, "ttySG0")
	dev_filetrans($1, tty_device_t, chr_file, "ttySG1")
	dev_filetrans($1, tty_device_t, chr_file, "ttySG2")
	dev_filetrans($1, tty_device_t, chr_file, "ttySG3")
	dev_filetrans($1, tty_device_t, chr_file, "ttySG4")
	dev_filetrans($1, tty_device_t, chr_file, "ttySG5")
	dev_filetrans($1, tty_device_t, chr_file, "ttySG6")
	dev_filetrans($1, tty_device_t, chr_file, "ttySG7")
	dev_filetrans($1, tty_device_t, chr_file, "ttySG8")
	dev_filetrans($1, tty_device_t, chr_file, "ttySG9")
	dev_filetrans($1, usbtty_device_t, chr_file, "ttyUSB0")
	dev_filetrans($1, usbtty_device_t, chr_file, "ttyUSB1")
	dev_filetrans($1, usbtty_device_t, chr_file, "ttyUSB2")
	dev_filetrans($1, usbtty_device_t, chr_file, "ttyUSB3")
	dev_filetrans($1, usbtty_device_t, chr_file, "ttyUSB4")
	dev_filetrans($1, usbtty_device_t, chr_file, "ttyUSB5")
	dev_filetrans($1, usbtty_device_t, chr_file, "ttyUSB6")
	dev_filetrans($1, usbtty_device_t, chr_file, "ttyUSB7")
	dev_filetrans($1, usbtty_device_t, chr_file, "ttyUSB8")
	dev_filetrans($1, usbtty_device_t, chr_file, "ttyUSB9")
	dev_filetrans($1, virtio_device_t, chr_file, "vport0p0")
	dev_filetrans($1, virtio_device_t, chr_file, "vport0p1")
	dev_filetrans($1, virtio_device_t, chr_file, "vport0p2")
	dev_filetrans($1, virtio_device_t, chr_file, "vport0p3")
	dev_filetrans($1, virtio_device_t, chr_file, "vport0p4")
	dev_filetrans($1, virtio_device_t, chr_file, "vport0p5")
	dev_filetrans($1, virtio_device_t, chr_file, "vport0p6")
	dev_filetrans($1, virtio_device_t, chr_file, "vport0p7")
	dev_filetrans($1, virtio_device_t, chr_file, "vport0p8")
	dev_filetrans($1, virtio_device_t, chr_file, "vport0p9")
	dev_filetrans($1, devpts_t, dir, "pts")
	dev_filetrans($1, tty_device_t, chr_file, "xvc0")
	dev_filetrans($1, tty_device_t, chr_file, "xvc1")
	dev_filetrans($1, tty_device_t, chr_file, "xvc2")
	dev_filetrans($1, tty_device_t, chr_file, "xvc3")
	dev_filetrans($1, tty_device_t, chr_file, "xvc4")
	dev_filetrans($1, tty_device_t, chr_file, "xvc5")
	dev_filetrans($1, tty_device_t, chr_file, "xvc6")
	dev_filetrans($1, tty_device_t, chr_file, "xvc7")
	dev_filetrans($1, tty_device_t, chr_file, "xvc8")
	dev_filetrans($1, tty_device_t, chr_file, "xvc9")
')