policy_module(cdrecord, 1.4.0)

########################################

#

# Declarations

#

## <desc>

## 

## Allow cdrecord to read various content.

## nfs, samba, removable devices, user temp

## and untrusted content files

## 

## </desc>

gen_tunable(cdrecord_read_content, false)

type cdrecord_exec_t;

application_executable_file(cdrecord_exec_t)