For local login i create a new rc-role login and assign this to ``/bin/login``

rc_set_item ROLE 5 name "Login"
attr_set_file_dir FILE "/bin/login" rc_initial_role 5
attr_set_file_dir FILE "/bin/login" rc_force_role 5

Permission to set:

rc_set_item ROLE 5 type_comp_fd 0 GET_PERMISSIONS_DATA GET_STATUS_DATA READ READ_OPEN SEARCH TRUNCATE MAP_EXEC IOCTL