luci-app-https-dns-proxy: decrease reliance on shell commands; proper acl.d file...

[project/luci.git] / applications / luci-app-https-dns-proxy / root / usr / share / rpcd / acl.d / luci-app-https-dns-proxy.json

diff --git a/applications/luci-app-https-dns-proxy/root/usr/share/rpcd/acl.d/luci-app-https-dns-proxy.json b/applications/luci-app-https-dns-proxy/root/usr/share/rpcd/acl.d/luci-app-https-dns-proxy.json
index 0886cc885a643dc0f38d1bc4737a84042cc3d167..bcd4c5fd7d09ff2e9576a4e3ab333fe0f7ef6e0b 100644 (file)
--- a/applications/luci-app-https-dns-proxy/root/usr/share/rpcd/acl.d/luci-app-https-dns-proxy.json
+++ b/applications/luci-app-https-dns-proxy/root/usr/share/rpcd/acl.d/luci-app-https-dns-proxy.json
@@ -1,11 +1,32 @@
 {
        "luci-app-https-dns-proxy": {
-               "description": "Grant UCI access for luci-app-https-dns-proxy",
+               "description": "Grant UCI and file access for luci-app-https-dns-proxy",
                "read": {
-                       "uci": [ "https-dns-proxy" ]
+                       "cgi-io": [
+                               "exec"
+                       ],
+                       "file": {
+                               "/usr/lib/opkg/status": [
+                                       "read"
+                               ],
+                               "/usr/lib/lua/luci/https-dns-proxy/providers/*": [
+                                       "read"
+                               ],
+                               "/etc/init.d/dnsmasq *": [
+                                       "exec"
+                               ],
+                               "/etc/init.d/https-dns-proxy *": [
+                                       "exec"
+                               ]
+                       },
+                       "uci": [
+                               "https-dns-proxy"
+                       ]
                },
                "write": {
-                       "uci": [ "https-dns-proxy" ]
+                       "uci": [
+                               "https-dns-proxy"
+                       ]
                }
        }
 }