# utempter needs write access on /run/utmp owned by root:utmp
elevated-privileges 2755 root/utmp [usr/lib/*/utempter/utempter]