gentoo-selinux-policies/getty_additional.te

policy_module(getty_additional, 0.0.1)

require {
  type getty_t;
  type getty_runtime_t;
}

allow getty_t getty_runtime_t:file watch;