policy_module(getty_additional, 0.0.1) require { type getty_t; type getty_runtime_t; } allow getty_t getty_runtime_t:file watch;