summaryrefslogtreecommitdiffhomepage
path: root/modules/luci-base/root/usr
diff options
context:
space:
mode:
authorJo-Philipp Wich <jo@mein.io>2019-11-03 20:34:57 +0100
committerJo-Philipp Wich <jo@mein.io>2019-11-03 20:34:57 +0100
commit9e57fbb2c3f9c44cdf0a57e6fb9c1df32c84d52b (patch)
tree29cc9751eca9a0254d45a19a615271f368b53b0d /modules/luci-base/root/usr
parenta43b1c6468e8fd931c721e83f9f18955509cfdaa (diff)
luci-base, luci-app-firewall: port custom rules to client side view
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Diffstat (limited to 'modules/luci-base/root/usr')
-rw-r--r--modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json7
1 files changed, 7 insertions, 0 deletions
diff --git a/modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json b/modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json
index a60c432bcb..321817302e 100644
--- a/modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json
+++ b/modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json
@@ -88,12 +88,19 @@
"luci-app-firewall": {
"description": "Grant access to firewall procedures",
"read": {
+ "file": {
+ "/etc/firewall.user": [ "read" ]
+ },
"ubus": {
"luci": [ "getConntrackHelpers" ]
},
"uci": [ "firewall" ]
},
"write": {
+ "file": {
+ "/etc/firewall.user": [ "write" ],
+ "/etc/init.d/firewall": [ "exec" ]
+ },
"uci": [ "firewall" ]
}
}