Layer: apps

Module: cdrecord

Policy for cdrecord

cdrecord_read_content

false

Allow cdrecord to read various content. nfs, samba, removable devices, user temp and untrusted content files

Return

cdrecord_per_role_template(
	
		userdomain_prefix
		
			,
		
		user_domain
		
			,
		
		user_role
		
	)

The per role template for the cdrecord module.

This template creates derived domains which are used for cdrecord.

This template is invoked automatically for each user, and generally does not need to be invoked directly by policy writers.

Parameter:	Description:
userdomain_prefix	The prefix of the user domain (e.g., user is the prefix for user_t).
user_domain	The type of the user domain.
user_role	The role associated with the user domain.

Return