From c099344013ad72d01a93b99184c72c5eeb792174 Mon Sep 17 00:00:00 2001 From: Jo-Philipp Wich Date: Thu, 9 Apr 2020 22:52:37 +0200 Subject: treewide: reorganize base ACLs Signed-off-by: Jo-Philipp Wich --- .../usr/share/rpcd/acl.d/luci-app-statistics.json | 20 +++++++++++++++----- 1 file changed, 15 insertions(+), 5 deletions(-) (limited to 'applications/luci-app-statistics/root') diff --git a/applications/luci-app-statistics/root/usr/share/rpcd/acl.d/luci-app-statistics.json b/applications/luci-app-statistics/root/usr/share/rpcd/acl.d/luci-app-statistics.json index 2529fca16..3168b3740 100644 --- a/applications/luci-app-statistics/root/usr/share/rpcd/acl.d/luci-app-statistics.json +++ b/applications/luci-app-statistics/root/usr/share/rpcd/acl.d/luci-app-statistics.json @@ -5,19 +5,29 @@ "cgi-io": [ "read", "exec" ], "file": { "/etc/filesystems": [ "read" ], - "/etc/group": [ "read" ], - "/etc/passwd": [ "read" ], "/proc/filesystems": [ "read" ], "/proc/interrupts": [ "read" ], "/proc/mounts": [ "read" ], "/proc/partitions": [ "read" ], "/proc/sys/kernel/hostname": [ "read" ], - "/usr/bin/rrdtool graph - -a PNG *": [ "exec" ], + "/tmp/rrd": [ "list" ], + "/usr/bin/rrdtool graph - -a PNG -s *": [ "exec" ], + "/usr/lib/collectd": [ "list" ], "/usr/sbin/iptables-save": [ "exec" ], "/usr/sbin/ip6tables-save": [ "exec" ], "/usr/sbin/sensors -j": [ "exec" ], - "/usr/share/luci/statistics/plugins/*.json": [ "read" ] - } + "/usr/share/luci/statistics/plugins": [ "list" ], + "/usr/share/luci/statistics/plugins/*.json": [ "read" ], + "/var/run": [ "list" ], + "/www/luci-static/resources/statistics/rrdtool/definitions": [ "list" ] + }, + "ubus": { + "file": [ "list", "read" ] + }, + "uci": [ "luci_statistics" ] + }, + "write": { + "uci": [ "luci_statistics" ] } } } -- cgit v1.2.3