# pam_console_apply
/sbin/pam_console_apply -- system_u:object_r:pam_console_exec_t
/var/run/console(/.*)? system_u:object_r:pam_var_console_t