020ac1e08d
The `/sys/devices/virtual/mtd/` information is not available on all devices so rely on the contents of `/proc/mtd` instead to check for the existence of the `rootfs_data` partition. Fixes: #3136 Signed-off-by: Jo-Philipp Wich <jo@mein.io>
88 lines
2.5 KiB
JSON
88 lines
2.5 KiB
JSON
{
|
|
"unauthenticated": {
|
|
"description": "Allow system feature probing",
|
|
"read": {
|
|
"ubus": {
|
|
"luci": [ "getFeatures" ]
|
|
}
|
|
}
|
|
},
|
|
|
|
"uci-access": {
|
|
"description": "Grant uci write access to all configurations",
|
|
"read": {
|
|
"uci": [ "*" ]
|
|
},
|
|
"write": {
|
|
"uci": [ "*" ]
|
|
}
|
|
},
|
|
"luci-access": {
|
|
"description": "Grant access to basic LuCI procedures",
|
|
"read": {
|
|
"cgi-io": [ "backup", "download" ],
|
|
"file": {
|
|
"/": [ "list" ],
|
|
"/*": [ "list" ],
|
|
"/dev/mtdblock*": [ "read" ],
|
|
"/etc/crontabs/root": [ "read" ],
|
|
"/etc/dropbear/authorized_keys": [ "read" ],
|
|
"/etc/filesystems": [ "read" ],
|
|
"/etc/rc.local": [ "read" ],
|
|
"/etc/sysupgrade.conf": [ "read" ],
|
|
"/proc/filesystems": [ "read" ],
|
|
"/proc/mtd": [ "read" ],
|
|
"/proc/partitions": [ "read" ],
|
|
"/proc/sys/kernel/hostname": [ "read" ],
|
|
"/sys/devices/virtual/ubi/*/name": [ "read" ]
|
|
},
|
|
"ubus": {
|
|
"file": [ "list", "read", "stat" ],
|
|
"iwinfo": [ "assoclist", "freqlist", "txpowerlist", "countrylist" ],
|
|
"luci": [ "getBoardJSON", "getDUIDHints", "getHostHints", "getIfaddrs", "getInitList", "getLocaltime", "getTimezones", "getDHCPLeases", "getLEDs", "getNetworkDevices", "getUSBDevices", "getWirelessDevices", "getSwconfigFeatures", "getSwconfigPortState", "getBlockDevices", "getMountPoints" ],
|
|
"network.device": [ "status" ],
|
|
"network.interface": [ "dump" ],
|
|
"network": [ "get_proto_handlers" ],
|
|
"system": [ "validate_firmware_image" ],
|
|
"uci": [ "changes", "get" ]
|
|
},
|
|
"uci": [ "*" ]
|
|
},
|
|
"write": {
|
|
"cgi-io": [ "upload" ],
|
|
"file": {
|
|
"/etc/crontabs/root": [ "write" ],
|
|
"/etc/dropbear/authorized_keys": [ "write" ],
|
|
"/etc/luci-uploads/*": [ "write" ],
|
|
"/etc/rc.local": [ "write" ],
|
|
"/etc/sysupgrade.conf": [ "write" ],
|
|
"/sbin/block": [ "exec" ],
|
|
"/sbin/firstboot": [ "exec" ],
|
|
"/sbin/reboot": [ "exec" ],
|
|
"/sbin/sysupgrade": [ "exec" ],
|
|
"/bin/tar": [ "exec" ],
|
|
"/tmp/backup.tar.gz": [ "write" ],
|
|
"/tmp/firmware.bin": [ "write" ]
|
|
},
|
|
"ubus": {
|
|
"file": [ "write", "remove", "exec" ],
|
|
"iwinfo": [ "scan" ],
|
|
"luci": [ "setInitAction", "setLocaltime", "setPassword", "setBlockDetect", "setUmount" ],
|
|
"uci": [ "add", "apply", "confirm", "delete", "order", "set", "rename" ]
|
|
},
|
|
"uci": [ "*" ]
|
|
}
|
|
},
|
|
"luci-app-firewall": {
|
|
"description": "Grant access to firewall procedures",
|
|
"read": {
|
|
"ubus": {
|
|
"luci": [ "getConntrackHelpers" ]
|
|
},
|
|
"uci": [ "firewall" ]
|
|
},
|
|
"write": {
|
|
"uci": [ "firewall" ]
|
|
}
|
|
}
|
|
}
|