summaryrefslogtreecommitdiffhomepage
path: root/modules/luci-base/root/usr
diff options
context:
space:
mode:
authorJo-Philipp Wich <jo@mein.io>2019-09-24 11:33:21 +0200
committerJo-Philipp Wich <jo@mein.io>2019-09-24 14:21:08 +0200
commit2a5c5f47f95978c6eb5c52b41b4e931e63afa4f5 (patch)
tree6ccc8475a1def3396c73d6b19df048b5b5261a0f /modules/luci-base/root/usr
parentcc786f9833a2fd294885ba979b7e68671a5aa122 (diff)
luci-mod-system: reimplement flashops as client side view
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Diffstat (limited to 'modules/luci-base/root/usr')
-rw-r--r--modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json20
1 files changed, 17 insertions, 3 deletions
diff --git a/modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json b/modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json
index af06d840d0..31c154cbcb 100644
--- a/modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json
+++ b/modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json
@@ -20,15 +20,22 @@
"luci-access": {
"description": "Grant access to basic LuCI procedures",
"read": {
+ "cgi-io": [ "backup", "download" ],
"file": {
"/": [ "list" ],
"/*": [ "list" ],
+ "/dev/mtdblock*": [ "read" ],
"/etc/crontabs/root": [ "read" ],
"/etc/dropbear/authorized_keys": [ "read" ],
"/etc/filesystems": [ "read" ],
"/etc/rc.local": [ "read" ],
+ "/etc/sysupgrade.conf": [ "read" ],
"/proc/filesystems": [ "read" ],
- "/proc/sys/kernel/hostname": [ "read" ]
+ "/proc/mtd": [ "read" ],
+ "/proc/partitions": [ "read" ],
+ "/proc/sys/kernel/hostname": [ "read" ],
+ "/sys/devices/virtual/mtd/*/name": [ "read" ],
+ "/sys/devices/virtual/ubi/*/name": [ "read" ]
},
"ubus": {
"file": [ "list", "read", "stat" ],
@@ -42,13 +49,20 @@
"uci": [ "*" ]
},
"write": {
- "cgi-io": [ "upload", "/etc/luci-uploads/*" ],
+ "cgi-io": [ "upload" ],
"file": {
"/etc/crontabs/root": [ "write" ],
"/etc/dropbear/authorized_keys": [ "write" ],
"/etc/luci-uploads/*": [ "write" ],
"/etc/rc.local": [ "write" ],
- "/sbin/block": [ "exec" ]
+ "/etc/sysupgrade.conf": [ "write" ],
+ "/sbin/block": [ "exec" ],
+ "/sbin/firstboot": [ "exec" ],
+ "/sbin/reboot": [ "exec" ],
+ "/sbin/sysupgrade": [ "exec" ],
+ "/bin/tar": [ "exec" ],
+ "/tmp/backup.tar.gz": [ "write" ],
+ "/tmp/firmware.bin": [ "write" ]
},
"ubus": {
"file": [ "write", "remove", "exec" ],