selinux-policy/policy/modules/apps/cdrecord.te
Chris PeBenito 56e1b3d207 - Move booleans and tunables to modules when it is only used in a single
module.
- Add support for tunables and booleans local to a module.
2007-03-26 18:41:45 +00:00

22 lines
379 B
Plaintext

policy_module(cdrecord,1.1.1)
########################################
#
# Declarations
#
ifdef(`strict_policy',`
## <desc>
## <p>
## Allow cdrecord to read various content.
## nfs, samba, removable devices, user temp
## and untrusted content files
## </p>
## </desc>
gen_tunable(cdrecord_read_content,false)
')
type cdrecord_exec_t;
corecmd_executable_file(cdrecord_exec_t)