diff --git a/policy/modules/services/xserver.te b/policy/modules/services/xserver.te
index d5076549..06e5ba9f 100644
--- a/policy/modules/services/xserver.te
+++ b/policy/modules/services/xserver.te
@@ -1,5 +1,5 @@
 
-policy_module(xserver, 3.0.0)
+policy_module(xserver, 3.0.1)
 
 gen_require(`
 	class x_drawable all_x_drawable_perms;
@@ -124,7 +124,7 @@ userdom_user_home_content(user_fonts_cache_t)
 type user_fonts_config_t;
 typealias user_fonts_config_t alias { staff_fonts_config_t sysadm_fonts_config_t };
 typealias user_fonts_config_t alias { auditadm_fonts_config_t secadm_fonts_config_t };
-userdom_user_home_content(user_fonts_cache_t)
+userdom_user_home_content(user_fonts_config_t)
 
 type xevent_t alias default_xevent_t, xevent_type;
 type xext_t alias unknown_xext_t, xextension_type;
diff --git a/policy/modules/system/userdomain.if b/policy/modules/system/userdomain.if
index 4cb08679..218bcfc1 100644
--- a/policy/modules/system/userdomain.if
+++ b/policy/modules/system/userdomain.if
@@ -57,6 +57,7 @@ template(`userdom_base_user_template',`
 	dontaudit $1_t self:socket create;
 
 	allow $1_t user_devpts_t:chr_file { setattr rw_chr_file_perms };
+	term_create_pty($1_t, user_devpts_t)
 	# avoid annoying messages on terminal hangup on role change
 	dontaudit $1_t user_devpts_t:chr_file ioctl;
 
diff --git a/policy/modules/system/userdomain.te b/policy/modules/system/userdomain.te
index 201c359f..63006c08 100644
--- a/policy/modules/system/userdomain.te
+++ b/policy/modules/system/userdomain.te
@@ -1,5 +1,5 @@
 
-policy_module(userdomain, 4.0.0)
+policy_module(userdomain, 4.0.1)
 
 ########################################
 #