Difuse/luci
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

treewide: stage ACL rules for legacy applications

Browse source 
Fixes: #3866
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 43e872871a)
This commit is contained in:
Jo-Philipp Wich 2020-04-10 23:21:35 +02:00
parent ccd9d67598
commit ecd49247eb
54 changed files with 589 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
applications/luci-app-ahcp/root/usr/share/rpcd/acl.d/luci-app-ahcp.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-ahcp": {
"description": "Grant UCI access for luci-app-ahcp",
"read": {
"uci": [ "ahcpd" ]
},
"write": {
"uci": [ "ahcpd" ]
}
}
}

11
applications/luci-app-aria2/root/usr/share/rpcd/acl.d/luci-app-aria2.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-aria2": {
"description": "Grant UCI access for luci-app-aria2",
"read": {
"uci": [ "aria2" ]
},
"write": {
"uci": [ "aria2" ]
}
}
}

11
applications/luci-app-banip/root/usr/share/rpcd/acl.d/luci-app-banip.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-banip": {
"description": "Grant UCI access for luci-app-banip",
"read": {
"uci": [ "banip" ]
},
"write": {
"uci": [ "banip" ]
}
}
}

11
applications/luci-app-bcp38/root/usr/share/rpcd/acl.d/luci-app-bcp38.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-bcp38": {
"description": "Grant UCI access for luci-app-bcp38",
"read": {
"uci": [ "bcp38" ]
},
"write": {
"uci": [ "bcp38" ]
}
}
}

11
applications/luci-app-clamav/root/usr/share/rpcd/acl.d/luci-app-clamav.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-clamav": {
"description": "Grant UCI access for luci-app-clamav",
"read": {
"uci": [ "clamav" ]
},
"write": {
"uci": [ "clamav" ]
}
}
}

11
applications/luci-app-commands/root/usr/share/rpcd/acl.d/luci-app-commands.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-commands": {
"description": "Grant UCI access for luci-app-commands",
"read": {
"uci": [ "luci" ]
},
"write": {
"uci": [ "luci" ]
}
}
}

11
applications/luci-app-coovachilli/root/usr/share/rpcd/acl.d/luci-app-coovachilli.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-coovachilli": {
"description": "Grant UCI access for luci-app-coovachilli",
"read": {
"uci": [ "coovachilli" ]
},
"write": {
"uci": [ "coovachilli" ]
}
}
}

11
applications/luci-app-cshark/root/usr/share/rpcd/acl.d/luci-app-cshark.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-cshark": {
"description": "Grant UCI access for luci-app-cshark",
"read": {
"uci": [ "cshark" ]
},
"write": {
"uci": [ "cshark" ]
}
}
}

11
applications/luci-app-dawn/root/usr/share/rpcd/acl.d/luci-app-dawn.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-dawn": {
"description": "Grant UCI access for luci-app-dawn",
"read": {
"uci": [ "dawn" ]
},
"write": {
"uci": [ "dawn" ]
}
}
}

11
applications/luci-app-dcwapd/root/usr/share/rpcd/acl.d/luci-app-dcwapd.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-dcwapd": {
"description": "Grant UCI access for luci-app-dcwapd",
"read": {
"uci": [ "dcwapd" ]
},
"write": {
"uci": [ "dcwapd" ]
}
}
}

11
applications/luci-app-dnscrypt-proxy/root/usr/share/rpcd/acl.d/luci-app-dnscrypt-proxy.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-dnscrypt-proxy": {
"description": "Grant UCI access for luci-app-dnscrypt-proxy",
"read": {
"uci": [ "dhcp", "dnscrypt-proxy" ]
},
"write": {
"uci": [ "dhcp", "dnscrypt-proxy" ]
}
}
}

11
applications/luci-app-dump1090/root/usr/share/rpcd/acl.d/luci-app-dump1090.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-dump1090": {
"description": "Grant UCI access for luci-app-dump1090",
"read": {
"uci": [ "dump1090" ]
},
"write": {
"uci": [ "dump1090" ]
}
}
}

11
applications/luci-app-dynapoint/root/usr/share/rpcd/acl.d/luci-app-dynapoint.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-dynapoint": {
"description": "Grant UCI access for luci-app-dynapoint",
"read": {
"uci": [ "dynapoint", "wireless" ]
},
"write": {
"uci": [ "dynapoint", "wireless" ]
}
}
}

8
applications/luci-app-firewall/root/usr/share/rpcd/acl.d/luci-app-openvpn.json
View file

@ -1,11 +1,15 @@
{
"luci-app-openvpn": {
"description": "Grant file upload access to /etc/openvpn",
"description": "Grant access to OpenVPN configuration",
"read": {
"uci": [ "openvpn" ]
},
"write": {
"cgi-io": [ "upload" ],
"file": {
"/etc/openvpn/*": [ "write" ]
}
},
"uci": [ "openvpn" ]
}
}
}

11
applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-fwknopd": {
"description": "Grant UCI access for luci-app-fwknopd",
"read": {
"uci": [ "fwknopd" ]
},
"write": {
"uci": [ "fwknopd" ]
}
}
}

11
applications/luci-app-hd-idle/root/usr/share/rpcd/acl.d/luci-app-hd-idle.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-hd-idle": {
"description": "Grant UCI access for luci-app-hd-idle",
"read": {
"uci": [ "hd-idle" ]
},
"write": {
"uci": [ "hd-idle" ]
}
}
}

11
applications/luci-app-https-dns-proxy/root/usr/share/rpcd/acl.d/luci-app-https-dns-proxy.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-https-dns-proxy": {
"description": "Grant UCI access for luci-app-https-dns-proxy",
"read": {
"uci": [ "https-dns-proxy" ]
},
"write": {
"uci": [ "https-dns-proxy" ]
}
}
}

11
applications/luci-app-ltqtapi/root/usr/share/rpcd/acl.d/luci-app-ltqtapi.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-ltqtapi": {
"description": "Grant UCI access for luci-app-ltqtapi",
"read": {
"uci": [ "telephony" ]
},
"write": {
"uci": [ "telephony" ]
}
}
}

11
applications/luci-app-lxc/root/usr/share/rpcd/acl.d/luci-app-lxc.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-lxc": {
"description": "Grant UCI access for luci-app-lxc",
"read": {
"uci": [ "lxc" ]
},
"write": {
"uci": [ "lxc" ]
}
}
}

11
applications/luci-app-mjpg-streamer/root/usr/share/rpcd/acl.d/luci-app-mjpg-streamer.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-mjpg-streamer": {
"description": "Grant UCI access for luci-app-mjpg-streamer",
"read": {
"uci": [ "mjpg-streamer" ]
},
"write": {
"uci": [ "mjpg-streamer" ]
}
}
}

11
applications/luci-app-mosquitto/root/usr/share/rpcd/acl.d/luci-app-mosquitto.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-mosquitto": {
"description": "Grant UCI access for luci-app-mosquitto",
"read": {
"uci": [ "mosquitto" ]
},
"write": {
"uci": [ "mosquitto" ]
}
}
}

11
applications/luci-app-mwan3/root/usr/share/rpcd/acl.d/luci-app-mwan3.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-mwan3": {
"description": "Grant UCI access for luci-app-mwan3",
"read": {
"uci": [ "mwan3" ]
},
"write": {
"uci": [ "mwan3" ]
}
}
}

11
applications/luci-app-nft-qos/root/usr/share/rpcd/acl.d/luci-app-nft-qos.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-nft-qos": {
"description": "Grant UCI access for luci-app-nft-qos",
"read": {
"uci": [ "nft-qos" ]
},
"write": {
"uci": [ "nft-qos" ]
}
}
}

11
applications/luci-app-nlbwmon/root/usr/share/rpcd/acl.d/luci-app-nlbwmon.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-nlbwmon": {
"description": "Grant UCI access for luci-app-nlbwmon",
"read": {
"uci": [ "nlbwmon" ]
},
"write": {
"uci": [ "nlbwmon" ]
}
}
}

11
applications/luci-app-noddos/root/usr/share/rpcd/acl.d/luci-app-noddos.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-noddos": {
"description": "Grant UCI access for luci-app-noddos",
"read": {
"uci": [ "noddos" ]
},
"write": {
"uci": [ "noddos" ]
}
}
}

11
applications/luci-app-ntpc/root/usr/share/rpcd/acl.d/luci-app-ntpc.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-ntpc": {
"description": "Grant UCI access for luci-app-ntpc",
"read": {
"uci": [ "ntpclient" ]
},
"write": {
"uci": [ "ntpclient" ]
}
}
}

11
applications/luci-app-nut/root/usr/share/rpcd/acl.d/luci-app-nut.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-nut": {
"description": "Grant UCI access for luci-app-nut",
"read": {
"uci": [ "nut_cgi", "nut_monitor", "nut_server" ]
},
"write": {
"uci": [ "nut_cgi", "nut_monitor", "nut_server" ]
}
}
}

11
applications/luci-app-ocserv/root/usr/share/rpcd/acl.d/luci-app-ocserv.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-ocserv": {
"description": "Grant UCI access for luci-app-ocserv",
"read": {
"uci": [ "ocserv" ]
},
"write": {
"uci": [ "ocserv" ]
}
}
}

11
applications/luci-app-olsr/root/usr/share/rpcd/acl.d/luci-app-olsr.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-olsr": {
"description": "Grant UCI access for luci-app-olsr",
"read": {
"uci": [ "luci_olsr", "olsrd", "olsrd6" ]
},
"write": {
"uci": [ "luci_olsr", "olsrd", "olsrd6" ]
}
}
}

11
applications/luci-app-p910nd/root/usr/share/rpcd/acl.d/luci-app-p910nd.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-p910nd": {
"description": "Grant UCI access for luci-app-p910nd",
"read": {
"uci": [ "p910nd" ]
},
"write": {
"uci": [ "p910nd" ]
}
}
}

11
applications/luci-app-polipo/root/usr/share/rpcd/acl.d/luci-app-polipo.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-polipo": {
"description": "Grant UCI access for luci-app-polipo",
"read": {
"uci": [ "polipo" ]
},
"write": {
"uci": [ "polipo" ]
}
}
}

11
applications/luci-app-privoxy/root/usr/share/rpcd/acl.d/luci-app-privoxy.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-privoxy": {
"description": "Grant UCI access for luci-app-privoxy",
"read": {
"uci": [ "privoxy" ]
},
"write": {
"uci": [ "privoxy" ]
}
}
}

11
applications/luci-app-qos/root/usr/share/rpcd/acl.d/luci-app-qos.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-qos": {
"description": "Grant UCI access for luci-app-qos",
"read": {
"uci": [ "qos" ]
},
"write": {
"uci": [ "qos" ]
}
}
}

11
applications/luci-app-radicale/root/usr/share/rpcd/acl.d/luci-app-radicale.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-radicale": {
"description": "Grant UCI access for luci-app-radicale",
"read": {
"uci": [ "radicale" ]
},
"write": {
"uci": [ "radicale" ]
}
}
}

11
applications/luci-app-radicale2/root/usr/share/rpcd/acl.d/luci-app-radicale2.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-radicale2": {
"description": "Grant UCI access for luci-app-radicale2",
"read": {
"uci": [ "radicale2" ]
},
"write": {
"uci": [ "radicale2" ]
}
}
}

11
applications/luci-app-rosy-file-server/root/usr/share/rpcd/acl.d/luci-app-rosy-file-server.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-rosy-file-server": {
"description": "Grant UCI access for luci-app-rosy-file-server",
"read": {
"uci": [ "rosyfs" ]
},
"write": {
"uci": [ "rosyfs" ]
}
}
}

11
applications/luci-app-rp-pppoe-server/root/usr/share/rpcd/acl.d/luci-app-rp-pppoe-server.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-rp-pppoe-server": {
"description": "Grant UCI access for luci-app-rp-pppoe-server",
"read": {
"uci": [ "pppoe" ]
},
"write": {
"uci": [ "pppoe" ]
}
}
}

11
applications/luci-app-samba/root/usr/share/rpcd/acl.d/luci-app-samba.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-samba": {
"description": "Grant UCI access for luci-app-samba",
"read": {
"uci": [ "samba" ]
},
"write": {
"uci": [ "samba" ]
}
}
}

11
applications/luci-app-shairplay/root/usr/share/rpcd/acl.d/luci-app-shairplay.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-shairplay": {
"description": "Grant UCI access for luci-app-shairplay",
"read": {
"uci": [ "shairplay" ]
},
"write": {
"uci": [ "shairplay" ]
}
}
}

11
applications/luci-app-simple-adblock/root/usr/share/rpcd/acl.d/luci-app-simple-adblock.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-simple-adblock": {
"description": "Grant UCI access for luci-app-simple-adblock",
"read": {
"uci": [ "simple-adblock" ]
},
"write": {
"uci": [ "simple-adblock" ]
}
}
}

11
applications/luci-app-snmpd/root/usr/share/rpcd/acl.d/luci-app-snmpd.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-snmpd": {
"description": "Grant UCI access for luci-app-snmpd",
"read": {
"uci": [ "snmpd" ]
},
"write": {
"uci": [ "snmpd" ]
}
}
}

11
applications/luci-app-splash/root/usr/share/rpcd/acl.d/luci-app-splash.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-splash": {
"description": "Grant UCI access for luci-app-splash",
"read": {
"uci": [ "luci_splash" ]
},
"write": {
"uci": [ "luci_splash" ]
}
}
}

11
applications/luci-app-sqm/root/usr/share/rpcd/acl.d/luci-app-sqm.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-sqm": {
"description": "Grant UCI access for luci-app-sqm",
"read": {
"uci": [ "sqm" ]
},
"write": {
"uci": [ "sqm" ]
}
}
}

11
applications/luci-app-squid/root/usr/share/rpcd/acl.d/luci-app-squid.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-squid": {
"description": "Grant UCI access for luci-app-squid",
"read": {
"uci": [ "squid" ]
},
"write": {
"uci": [ "squid" ]
}
}
}

11
applications/luci-app-tinyproxy/root/usr/share/rpcd/acl.d/luci-app-tinyproxy.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-tinyproxy": {
"description": "Grant UCI access for luci-app-tinyproxy",
"read": {
"uci": [ "tinyproxy" ]
},
"write": {
"uci": [ "tinyproxy" ]
}
}
}

11
applications/luci-app-travelmate/root/usr/share/rpcd/acl.d/luci-app-travelmate.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-travelmate": {
"description": "Grant UCI access for luci-app-travelmate",
"read": {
"uci": [ "travelmate" ]
},
"write": {
"uci": [ "travelmate" ]
}
}
}

11
applications/luci-app-udpxy/root/usr/share/rpcd/acl.d/luci-app-udpxy.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-udpxy": {
"description": "Grant UCI access for luci-app-udpxy",
"read": {
"uci": [ "udpxy" ]
},
"write": {
"uci": [ "udpxy" ]
}
}
}

11
applications/luci-app-uhttpd/root/usr/share/rpcd/acl.d/luci-app-uhttpd.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-uhttpd": {
"description": "Grant UCI access for luci-app-uhttpd",
"read": {
"uci": [ "uhttpd" ]
},
"write": {
"uci": [ "uhttpd" ]
}
}
}

11
applications/luci-app-unbound/root/usr/share/rpcd/acl.d/luci-app-unbound.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-unbound": {
"description": "Grant UCI access for luci-app-unbound",
"read": {
"uci": [ "unbound" ]
},
"write": {
"uci": [ "unbound" ]
}
}
}

11
applications/luci-app-vnstat/root/usr/share/rpcd/acl.d/luci-app-vnstat.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-vnstat": {
"description": "Grant UCI access for luci-app-vnstat",
"read": {
"uci": [ "vnstat" ]
},
"write": {
"uci": [ "vnstat" ]
}
}
}

11
applications/luci-app-vpn-policy-routing/root/usr/share/rpcd/acl.d/luci-app-vpn-policy-routing.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-vpn-policy-routing": {
"description": "Grant UCI access for luci-app-vpn-policy-routing",
"read": {
"uci": [ "vpn-policy-routing" ]
},
"write": {
"uci": [ "vpn-policy-routing" ]
}
}
}

11
applications/luci-app-vpnbypass/root/usr/share/rpcd/acl.d/luci-app-vpnbypass.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-vpnbypass": {
"description": "Grant UCI access for luci-app-vpnbypass",
"read": {
"uci": [ "dhcp", "vpnbypass" ]
},
"write": {
"uci": [ "dhcp", "vpnbypass" ]
}
}
}

11
applications/luci-app-watchcat/root/usr/share/rpcd/acl.d/luci-app-watchcat.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-watchcat": {
"description": "Grant UCI access for luci-app-watchcat",
"read": {
"uci": [ "system" ]
},
"write": {
"uci": [ "system" ]
}
}
}

11
applications/luci-app-wifischedule/root/usr/share/rpcd/acl.d/luci-app-wifischedule.json Normal file
View file

@ -0,0 +1,11 @@
{
"luci-app-wifischedule": {
"description": "Grant UCI access for luci-app-wifischedule",
"read": {
"uci": [ "wifi_schedule" ]
},
"write": {
"uci": [ "wifi_schedule" ]
}
}
}