policy_module(cdrecord,1.4.0)

########################################

#

# Declarations

#

## <desc>

## 

## Allow cdrecord to read various content.

## nfs, samba, removable devices, user temp

## and untrusted content files

## 

## </desc>

gen_tunable(cdrecord_read_content,false)

type cdrecord_exec_t;

application_executable_file(cdrecord_exec_t)