possible linuxkit getty regression

[cyphar]

See linuxkit/linuxkit#3684. It seems that getty is failing in LinuxKit with EPERM (they thought it was a DAC permissions issue, but usually you don't get EPERM from those -- EACCES is more standard).

Quick blurb before I forget; in LinuxKit, they found a change in behaviour w.r.t. permissions (I think in rc94/rc95). It's possible this was intentional (I haven't found time to bisect); in case someone knows if this was an intentional change, or a regression; linuxkit/linuxkit#3684 (comment) /cc @rn @djs55

Originally posted by @thaJeztah in #2971 (comment)

[cyphar]

This was intentional -- they're being tripped up on the removal of /dev/console from the default allow list in #2391. This can (and should) be worked around on their end by using --device /dev/console or equivalent so that they have an explicit allow rule for the host /dev/console.