tty and pts are part of abstractions/consoles

apparmor.d/groups/gnome/gdm-session-worker

@@ -9,6 +9,7 @@ include <tunables/global>
 @{exec_path} = @{libexec}/gdm-session-worker
 profile gdm-session-worker @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
+  include <abstractions/consoles>
   include <abstractions/authentication>
   include <abstractions/dbus-session-strict>
   include <abstractions/dbus-strict>
@@ -87,7 +88,6 @@ profile gdm-session-worker @{exec_path} flags=(attach_disconnected) {
         @{PROC}/1/limits r,
         @{PROC}/keys r,
 
-  /dev/tty rw,
   /dev/tty[0-9]* rw,
 
   include if exists <local/gdm-session-worker>

apparmor.d/groups/gnome/gdm-xsession

@@ -43,7 +43,6 @@ profile gdm-xsession @{exec_path} {
     /{usr/,}bin/dbus-update-activation-environment mr,
 
     # file_inherit
-    /dev/tty rw,
     /dev/tty[0-9]* rw,
     owner @{HOME}/.xsession-errors w,
   }

apparmor.d/groups/gnome/gjs-console

@@ -9,6 +9,7 @@ include <tunables/global>
 @{exec_path}  = /{usr/,}bin/gjs-console
 profile gjs-console @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
+  include <abstractions/consoles>
   include <abstractions/dbus-session-strict>
   include <abstractions/dconf-write>
   include <abstractions/dri-common>
@@ -58,7 +59,6 @@ profile gjs-console @{exec_path} flags=(attach_disconnected) {
   owner @{PROC}/@{pid}/stat r,
 
   /dev/ r,
-  /dev/tty rw,
   /dev/tty[0-9]* rw,
 
   include if exists <local/gjs-console>

apparmor.d/groups/gnome/gnome-extensions-app

@@ -9,6 +9,7 @@ include <tunables/global>
 @{exec_path} = /{usr/,}bin/gnome-extensions-app
 profile gnome-extensions-app @{exec_path} {
   include <abstractions/base>
+  include <abstractions/consoles>
 
   @{exec_path} mr,
 
@@ -17,7 +18,6 @@ profile gnome-extensions-app @{exec_path} {
 
   /usr/share/terminfo/x/xterm-256color r,
 
-  /dev/tty rw,
 
   include if exists <local/gnome-extensions-app>
 }

apparmor.d/groups/gnome/gnome-session-binary

@@ -9,6 +9,7 @@ include <tunables/global>
 @{exec_path} = @{libexec}/gnome-session-binary
 profile gnome-session-binary @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
+  include <abstractions/consoles>
   include <abstractions/dbus-session-strict>
   include <abstractions/dbus-strict>
   include <abstractions/dconf-write>
@@ -141,7 +142,6 @@ profile gnome-session-binary @{exec_path} flags=(attach_disconnected) {
         @{PROC}/@{pid}/cgroup r,
         @{PROC}/cmdline r,
 
-  /dev/tty rw,
   /dev/tty[0-9]* rw,
 
   include if exists <usr/gnome-session-binary.d>

apparmor.d/groups/gnome/gsd-xsettings

@@ -9,6 +9,7 @@ include <tunables/global>
 @{exec_path} = @{libexec}/gsd-xsettings
 profile gsd-xsettings @{exec_path} {
   include <abstractions/base>
+  include <abstractions/consoles>
   include <abstractions/dbus-session-strict>
   include <abstractions/dbus-strict>
   include <abstractions/dconf-write>
@@ -70,7 +71,6 @@ profile gsd-xsettings @{exec_path} {
 
   owner @{PROC}/@{pid}/fd/ r,
 
-  /dev/tty rw,
   /dev/tty[0-9]* rw,
 
   profile run-parts {

apparmor.d/groups/gnome/nautilus

@@ -9,6 +9,7 @@ include <tunables/global>
 @{exec_path} = /{usr/,}bin/nautilus
 profile nautilus @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
+  include <abstractions/consoles>
   include <abstractions/app-launcher-user>
   include <abstractions/dbus-strict>
   include <abstractions/dconf-write>
@@ -61,7 +62,6 @@ profile nautilus @{exec_path} flags=(attach_disconnected) {
   owner @{PROC}/@{pid}/mountinfo r,
         @{PROC}/@{pids}/net/wireless r,
 
-  /dev/tty rw,
   /dev/dri/card[0-9]* rw,
 
   include if exists <local/nautilus>