policy_module(cdrecord,1.4.0)

########################################
#
# Declarations
#

## <desc>
## <p>
## Allow cdrecord to read various content.
## nfs, samba, removable devices, user temp
## and untrusted content files
## </p>
## </desc>
gen_tunable(cdrecord_read_content,false)

type cdrecord_exec_t;
application_executable_file(cdrecord_exec_t)