applications/luci-app-banip/root/usr/share/rpcd/acl.d/luci-app-banip.json

   1 {
   2         "luci-app-banip": {
   3                 "description": "Grant access to LuCI app banIP",
   4                 "write": {
   5                         "uci": [
   6                                 "banip"
   7                         ],
   8                         "file": {
   9                                 "/etc/banip/*": [
  10                                         "read"
  11                                 ],
  12                                 "/etc/banip/banip.allowlist": [
  13                                         "write"
  14                                 ],
  15                                 "/etc/banip/banip.blocklist": [
  16                                         "write"
  17                                 ],
  18                                 "/etc/banip/banip.feeds": [
  19                                         "write"
  20                                 ]
  21                         }
  22                 },
  23                 "read": {
  24                         "cgi-io": [
  25                                 "exec"
  26                         ],
  27                         "file": {
  28                                 "/var/run/banip.lock": [
  29                                         "read"
  30                                 ],
  31                                 "/sbin/logread -e banIP-": [
  32                                         "exec"
  33                                 ],
  34                                 "/usr/sbin/logread -e banIP-": [
  35                                         "exec"
  36                                 ],
  37                                 "/sbin/logread -e  banIP/": [
  38                                         "exec"
  39                                 ],
  40                                 "/usr/sbin/logread -e  banIP/": [
  41                                         "exec"
  42                                 ],
  43                                 "/usr/sbin/nft -tj list ruleset": [
  44                                         "exec"
  45                                 ],
  46                                 "/etc/init.d/banip stop": [
  47                                         "exec"
  48                                 ],
  49                                 "/etc/init.d/banip reload": [
  50                                         "exec"
  51                                 ],
  52                                 "/etc/init.d/banip restart": [
  53                                         "exec"
  54                                 ],
  55                                 "/etc/init.d/banip report json": [
  56                                         "exec"
  57                                 ],
  58                                 "/etc/init.d/banip search [A-Za-z0-9:.]*": [
  59                                         "exec"
  60                                 ],
  61                                 "/etc/init.d/banip survey [A-Za-z0-9]*": [
  62                                         "exec"
  63                                 ],
  64                                 "/etc/init.d/banip status": [
  65                                         "exec"
  66                                 ],
  67                                 "/etc/init.d/banip lookup": [
  68                                         "exec"
  69                                 ]
  70                         },
  71                         "uci": [
  72                                 "banip"
  73                         ]
  74                 }
  75         }
  76 }