-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
1. unconfined_login boolean does not work.
2. either userdom_use_user_terminals needs "open" for user_devpts_t or we have to allow $1_sudo_t open access to user_devpts_t:chr_file.
(allow staff_sudo_t user_devpts_t:chr_file open;)
3. mount needs to mounton var_lock_t directories.
(allow mount_t var_lock_t:dir mounton;)