(In reply to Fabian Vogt from comment #3) > getty-generator does: > > r = getenv_for_pid(1, "SYSTEMD_GETTY_AUTO", &getty_auto); > > Opening /proc/1/environ fails with EACCESS. According to the code it should > effectively treat that as "true", but apparently that's not the case? ^ is a bug as well, but a red herring. With strace it's visible that it tries to open /dev/ttyS0 but fails with -EACCES. No denial in audit.log though.