selinux-policy/policy/modules/apps/cdrecord.te


policy_module(cdrecord,1.2.0)

########################################
#
# Declarations
#

ifdef(`strict_policy',`
## <desc>
## <p>
## Allow cdrecord to read various content.
## nfs, samba, removable devices, user temp
## and untrusted content files
## </p>
## </desc>
gen_tunable(cdrecord_read_content,false)
')

type cdrecord_exec_t;
corecmd_executable_file(cdrecord_exec_t)
add cdrecord 2006-01-12 23:23:22 +00:00
bump module versions for release 2007-04-17 13:28:09 +00:00			`policy_module(cdrecord,1.2.0)`
add cdrecord 2006-01-12 23:23:22 +00:00
			`########################################`
			`#`
			`# Declarations`
			`#`

- Move booleans and tunables to modules when it is only used in a single module. - Add support for tunables and booleans local to a module. 2007-03-26 18:41:45 +00:00			ifdef(`strict_policy',`
			`## <desc>`
			`## <p>`
			`## Allow cdrecord to read various content.`
			`## nfs, samba, removable devices, user temp`
			`## and untrusted content files`
			`## </p>`
			`## </desc>`
			`gen_tunable(cdrecord_read_content,false)`
			`')`

add cdrecord 2006-01-12 23:23:22 +00:00			`type cdrecord_exec_t;`
add concept of executables, and update policies which really want this intead of entrypoints 2006-04-19 21:43:02 +00:00			`corecmd_executable_file(cdrecord_exec_t)`