Further selinux fixes - allow ioctl and getattr on tty