3 "description": "Allow system feature probing",
6 "luci": [ "getFeatures" ]
12 "description": "Grant uci write access to all configurations",
21 "description": "Grant access to basic LuCI procedures",
23 "cgi-io": [ "backup", "download" ],
27 "/dev/mtdblock*": [ "read" ],
28 "/etc/crontabs/root": [ "read" ],
29 "/etc/dropbear/authorized_keys": [ "read" ],
30 "/etc/filesystems": [ "read" ],
31 "/etc/rc.local": [ "read" ],
32 "/etc/sysupgrade.conf": [ "read" ],
33 "/etc/passwd": [ "read" ],
34 "/etc/group": [ "read" ],
35 "/proc/filesystems": [ "read" ],
36 "/proc/mtd": [ "read" ],
37 "/proc/partitions": [ "read" ],
38 "/proc/sys/kernel/hostname": [ "read" ],
39 "/proc/sys/net/netfilter/nf_conntrack_*": [ "read" ],
40 "/proc/mounts": [ "read" ],
41 "/usr/lib/lua/luci/version.lua": [ "read" ]
44 "file": [ "list", "read", "stat" ],
45 "iwinfo": [ "assoclist", "freqlist", "txpowerlist", "countrylist" ],
46 "luci": [ "getConntrackList", "getDUIDHints", "getInitList", "getLocaltime", "getRealtimeStats", "getTimezones", "getLEDs", "getUSBDevices", "getSwconfigFeatures", "getSwconfigPortState", "getBlockDevices", "getMountPoints" ],
47 "luci-rpc": [ "getBoardJSON", "getDHCPLeases", "getDSLStatus", "getHostHints", "getNetworkDevices", "getWirelessDevices" ],
48 "network.interface": [ "dump" ],
49 "network.rrdns": [ "lookup" ],
50 "network": [ "get_proto_handlers" ],
51 "system": [ "board", "info", "validate_firmware_image" ],
52 "uci": [ "changes", "get" ]
57 "cgi-io": [ "upload" ],
59 "/etc/crontabs/root": [ "write" ],
60 "/etc/dropbear/authorized_keys": [ "write" ],
61 "/etc/luci-uploads/*": [ "write" ],
62 "/etc/rc.local": [ "write" ],
63 "/etc/sysupgrade.conf": [ "write" ],
64 "/sbin/block": [ "exec" ],
65 "/sbin/firstboot": [ "exec" ],
66 "/sbin/ifdown": [ "exec" ],
67 "/sbin/ifup": [ "exec" ],
68 "/sbin/reboot": [ "exec" ],
69 "/sbin/sysupgrade": [ "exec" ],
70 "/sbin/wifi": [ "exec" ],
71 "/bin/tar": [ "exec" ],
72 "/bin/umount": [ "exec" ],
73 "/tmp/backup.tar.gz": [ "write" ],
74 "/tmp/firmware.bin": [ "write" ],
75 "/tmp/upload.ipk": [ "write" ]
78 "file": [ "write", "remove", "exec" ],
79 "hostapd.*": [ "del_client" ],
81 "luci": [ "setInitAction", "setLocaltime", "setPassword", "setBlockDetect" ],
82 "uci": [ "add", "apply", "confirm", "delete", "order", "set", "rename" ]
87 "luci-app-firewall": {
88 "description": "Grant access to firewall procedures",
91 "luci": [ "getConntrackHelpers" ]