basically want to constrain access to terminals and sock files owned by other rbacsep constrained roles
basically want to constrain access to terminals and sock files owned by other rbacsep constrained roles

These term attributes dont really belong here, i should probably do some typeattributeset "(not" magic to make all devices except term devices type rbacsep exempt obj types

Then again, term is part of base and pretty much non-negotionable ... so we'll see

DefenSec/dssp