summaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorJo-Philipp Wich <jo@mein.io>2019-09-12 14:42:12 +0200
committerJo-Philipp Wich <jo@mein.io>2019-09-12 14:42:12 +0200
commit8178ac15b672870d3143bff84c37bbeb92e23f2d (patch)
tree1f21d97fc89d9fb6c5b440a1b15c7ec3e3fc1297
parent0eb5661e8cd1f2cb02b142cffd9614d2f035dcd9 (diff)
luci-base: whitelist file/write actions on /etc/rc.local
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
-rw-r--r--modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json6
1 files changed, 4 insertions, 2 deletions
diff --git a/modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json b/modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json
index a0852eaec..f2ee7ce2c 100644
--- a/modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json
+++ b/modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json
@@ -23,6 +23,7 @@
"file": {
"/": [ "list" ],
"/*": [ "list" ],
+ "/etc/rc.local": [ "read" ],
"/proc/sys/kernel/hostname": [ "read" ]
},
"ubus": {
@@ -39,10 +40,11 @@
"write": {
"cgi-io": [ "upload", "/etc/luci-uploads/*" ],
"file": {
- "/etc/luci-uploads/*": [ "write" ]
+ "/etc/luci-uploads/*": [ "write" ],
+ "/etc/rc.local": [ "write" ]
},
"ubus": {
- "file": [ "remove" ],
+ "file": [ "write", "remove" ],
"iwinfo": [ "scan" ],
"luci": [ "setInitAction", "setLocaltime" ],
"uci": [ "add", "apply", "confirm", "delete", "order", "set", "rename" ]