summaryrefslogtreecommitdiffhomepage
path: root/modules/luci-base/root/usr/share/rpcd/acl.d
diff options
context:
space:
mode:
authorJo-Philipp Wich <jo@mein.io>2018-04-21 14:59:41 +0200
committerJo-Philipp Wich <jo@mein.io>2018-04-21 14:59:41 +0200
commit628048772db3eb4456a7e73839b2644f5398702d (patch)
treebc27de414a5de40b20eb931d7f00eb8bf78b2ac4 /modules/luci-base/root/usr/share/rpcd/acl.d
parent77aa96c52a0aba57b9090430c17fbfe05c61a379 (diff)
luci-base: ship rpcd uci access ACL
Ship an ACL definition for granting full read/write access to uci configuration files via ubus rpc. This is a precondition for enabling uci session isolation later on. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Diffstat (limited to 'modules/luci-base/root/usr/share/rpcd/acl.d')
-rw-r--r--modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json11
1 files changed, 11 insertions, 0 deletions
diff --git a/modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json b/modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json
new file mode 100644
index 0000000000..ed7ad8aa8a
--- /dev/null
+++ b/modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json
@@ -0,0 +1,11 @@
+{
+ "uci-access": {
+ "description": "Grant uci write access to all configurations",
+ "read": {
+ "uci": [ "*" ]
+ },
+ "write": {
+ "uci": [ "*" ]
+ }
+ }
+}