policy_module(cdrecord, 1.4.0)

########################################
#
# Declarations
#

## <desc>
## <p>
## Allow cdrecord to read various content.
## nfs, samba, removable devices, user temp
## and untrusted content files
## </p>
## </desc>
gen_tunable(cdrecord_read_content, false)

type cdrecord_exec_t;
application_executable_file(cdrecord_exec_t)