policy_module(cdrecord,1.2.1)

########################################

#

# Declarations

#

ifdef(`strict_policy',`

## <desc>

## 

## Allow cdrecord to read various content.

## nfs, samba, removable devices, user temp

## and untrusted content files

## 

## </desc>

gen_tunable(cdrecord_read_content,false)

')

type cdrecord_exec_t;

application_executable_file(cdrecord_exec_t)