Written by: Martin Orr

Add apt_dontaudit_use_ptys to su_restricted_domain_template

The aim of this is shut up initrc_su_t running from clamav's init script
I'm not sure if this can be done without doing this across all su domains

Index: policy/modules/admin/su.if
===================================================================
--- policy/modules/admin/su.if.orig
+++ policy/modules/admin/su.if
@@ -125,6 +125,10 @@
 	')
 
 	optional_policy(`
+		apt_dontaudit_use_ptys($1_su_t)
+	')
+
+	optional_policy(`
 		cron_read_pipes($1_su_t)
 	')