diff --git a/Makefile b/Makefile
index 1a9b611..9fc4080 100644
--- a/Makefile
+++ b/Makefile
@@ -231,7 +231,7 @@ seusers := $(appconf)/seusers
 appdir := $(contextpath)
 user_default_contexts := $(wildcard config/appconfig-$(TYPE)/*_default_contexts)
 user_default_contexts_names := $(addprefix $(contextpath)/users/,$(subst _default_contexts,,$(notdir $(user_default_contexts))))
-appfiles := $(addprefix $(appdir)/,default_contexts default_type initrc_context failsafe_context userhelper_context removable_context dbus_contexts customizable_types) $(contextpath)/files/media $(user_default_contexts_names)
+appfiles := $(addprefix $(appdir)/,default_contexts default_type initrc_context failsafe_context userhelper_context removable_context dbus_contexts customizable_types securetty_types) $(contextpath)/files/media $(user_default_contexts_names)
 net_contexts := $(builddir)net_contexts
 
 all_layers := $(shell find $(wildcard $(moddir)/*) -maxdepth 0 -type d)
diff --git a/config/appconfig-mcs/securetty_types b/config/appconfig-mcs/securetty_types
new file mode 100644
index 0000000..4a987ef
--- /dev/null
+++ b/config/appconfig-mcs/securetty_types
@@ -0,0 +1,4 @@
+staff_tty_device_t
+sysadm_tty_device_t
+unconfined_tty_device_t
+user_tty_device_t
diff --git a/config/appconfig-mls/securetty_types b/config/appconfig-mls/securetty_types
new file mode 100644
index 0000000..0a17453
--- /dev/null
+++ b/config/appconfig-mls/securetty_types
@@ -0,0 +1,6 @@
+auditadm_tty_device_t
+secadm_tty_device_t
+staff_tty_device_t
+sysadm_tty_device_t
+unconfined_tty_device_t
+user_tty_device_t
diff --git a/config/appconfig-standard/securetty_types b/config/appconfig-standard/securetty_types
new file mode 100644
index 0000000..4a987ef
--- /dev/null
+++ b/config/appconfig-standard/securetty_types
@@ -0,0 +1,4 @@
+staff_tty_device_t
+sysadm_tty_device_t
+unconfined_tty_device_t
+user_tty_device_t