1 files changed, 20 insertions, 0 deletions
diff --git a/applications/luci-app-sshtunnel/root/usr/share/rpcd/acl.d/luci-app-sshtunnel.json b/applications/luci-app-sshtunnel/root/usr/share/rpcd/acl.d/luci-app-sshtunnel.json
new file mode 100644
index 0000000000..5dfb1405c7
--- /dev/null
+++ b/applications/luci-app-sshtunnel/root/usr/share/rpcd/acl.d/luci-app-sshtunnel.json
@@ -0,0 +1,20 @@
+{
+	"luci-app-sshtunnel": {
+		"description": "Grant UCI access for luci-app-sshtunnel",
+		"read": {
+			"file": {
+				"/root/.ssh/": [ "list" ],
+				"/root/.ssh/*.pub": [ "read" ],
+				"/root/.ssh/known_hosts": [ "read" ],
+				"/usr/bin/ssh-keygen": [ "list" ],
+				"/usr/bin/ssh-keygen *": [ "exec" ],
+				"/usr/bin/dropbearkey": [ "list" ],
+				"/usr/bin/dropbearkey *": [ "exec" ]
+			},
+			"uci": [ "sshtunnel" ]
+		},
+		"write": {
+			"uci": [ "sshtunnel" ]
+		}
+	}
+}