Allow cdrecord_t to execute bin_t from Dan Walsh
growisofs executes mkisofs
This commit is contained in:
parent
4af2b3fb98
commit
cf3da95084
|
@ -32,6 +32,9 @@ allow cdrecord_t self:process { getcap getsched setsched sigkill };
|
|||
allow cdrecord_t self:unix_dgram_socket create_socket_perms;
|
||||
allow cdrecord_t self:unix_stream_socket create_stream_socket_perms;
|
||||
|
||||
# growisofs uses mkisofs
|
||||
corecmd_exec_bin(cdrecord_t)
|
||||
|
||||
# allow searching for cdrom-drive
|
||||
dev_list_all_dev_nodes(cdrecord_t)
|
||||
dev_read_sysfs(cdrecord_t)
|
||||
|
|
Loading…
Reference in New Issue