policy_module(cdrecord,1.1.1)

########################################
#
# Declarations
#

ifdef(`strict_policy',`
## <desc>
## <p>
## Allow cdrecord to read various content.
## nfs, samba, removable devices, user temp
## and untrusted content files
## </p>
## </desc>
gen_tunable(cdrecord_read_content,false)
')

type cdrecord_exec_t;
corecmd_executable_file(cdrecord_exec_t)