policy_module(cdrecord, 1.4.0) ######################################## # # Declarations # ## ##

## Allow cdrecord to read various content. ## nfs, samba, removable devices, user temp ## and untrusted content files ##

##
gen_tunable(cdrecord_read_content, false) type cdrecord_exec_t; application_executable_file(cdrecord_exec_t)