diff --git a/tests/su/04/su_user_wrong_passwd_syslog.test b/tests/su/04/su_user_wrong_passwd_syslog.test
index df2635d0..46693aae 100755
--- a/tests/su/04/su_user_wrong_passwd_syslog.test
+++ b/tests/su/04/su_user_wrong_passwd_syslog.test
@@ -24,7 +24,7 @@ echo -n "Looking for 'FAILED su for myuser by testsuite' in /var/log/auth.log...
 grep -q "FAILED su for myuser by testsuite" /var/log/auth.log
 echo "OK"
 echo -n "Looking for '- pts/[0-9]+ testsuite:myuser' in /var/log/auth.log..."
-grep -q -E "\- pts/[0-9]+ testsuite:myuser" /var/log/auth.log
+grep -q -E "\- /dev/pts/[0-9]+ testsuite:myuser" /var/log/auth.log
 echo "OK"
 
 log_status "$0" "SUCCESS"
diff --git a/tests/su/06/su_user_syslog.test b/tests/su/06/su_user_syslog.test
index 36bc9e8c..5a69fa67 100755
--- a/tests/su/06/su_user_syslog.test
+++ b/tests/su/06/su_user_syslog.test
@@ -23,7 +23,7 @@ echo -n "Looking for 'Successful su for myuser by testsuite' in /var/log/auth.lo
 grep -q "Successful su for myuser by testsuite" /var/log/auth.log
 echo "OK"
 echo -n "Looking for '+ pts/[0-9]+ tstsuite:myuser' in /var/log/auth.log..."
-grep -q -E "\+ pts/[0-9]+ testsuite:myuser" /var/log/auth.log
+grep -q -E "\+ /dev/pts/[0-9]+ testsuite:myuser" /var/log/auth.log
 echo "OK"
 
 log_status "$0" "SUCCESS"