First libselinux-rhat patch was broken. Needs to only check the context type. more /etc/selinux/mls/contexts/securetty_contexts sysadm_tty_device_t staff_tty_device_t user_tty_device_t