From b92be52d89d6cb21a3f3a114a006d173d1598433 Mon Sep 17 00:00:00 2001 From: Stan Grishin Date: Sat, 30 May 2020 11:40:54 +0000 Subject: luci-app-https-dns-proxy: decrease reliance on shell commands; proper acl.d file; add cloudflare family/protect Signed-off-by: Stan Grishin --- .../share/rpcd/acl.d/luci-app-https-dns-proxy.json | 27 +++++++++++++++++++--- 1 file changed, 24 insertions(+), 3 deletions(-) (limited to 'applications/luci-app-https-dns-proxy/root') diff --git a/applications/luci-app-https-dns-proxy/root/usr/share/rpcd/acl.d/luci-app-https-dns-proxy.json b/applications/luci-app-https-dns-proxy/root/usr/share/rpcd/acl.d/luci-app-https-dns-proxy.json index 0886cc885a..bcd4c5fd7d 100644 --- a/applications/luci-app-https-dns-proxy/root/usr/share/rpcd/acl.d/luci-app-https-dns-proxy.json +++ b/applications/luci-app-https-dns-proxy/root/usr/share/rpcd/acl.d/luci-app-https-dns-proxy.json @@ -1,11 +1,32 @@ { "luci-app-https-dns-proxy": { - "description": "Grant UCI access for luci-app-https-dns-proxy", + "description": "Grant UCI and file access for luci-app-https-dns-proxy", "read": { - "uci": [ "https-dns-proxy" ] + "cgi-io": [ + "exec" + ], + "file": { + "/usr/lib/opkg/status": [ + "read" + ], + "/usr/lib/lua/luci/https-dns-proxy/providers/*": [ + "read" + ], + "/etc/init.d/dnsmasq *": [ + "exec" + ], + "/etc/init.d/https-dns-proxy *": [ + "exec" + ] + }, + "uci": [ + "https-dns-proxy" + ] }, "write": { - "uci": [ "https-dns-proxy" ] + "uci": [ + "https-dns-proxy" + ] } } } -- cgit v1.2.3