These additional SELinux policy rules are required to allow *root* to log in on the serial console and directly assume the `sysadm_r` role.