From 1d47f0c1a913ccbcba86061daa20e1e336d7b559 Mon Sep 17 00:00:00 2001 From: Jo-Philipp Wich Date: Thu, 13 Feb 2020 19:33:05 +0100 Subject: [PATCH] luci-app-statistics: add missing ACL rules Signed-off-by: Jo-Philipp Wich --- .../share/rpcd/acl.d/luci-app-statistics.json | 23 +++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 applications/luci-app-statistics/root/usr/share/rpcd/acl.d/luci-app-statistics.json diff --git a/applications/luci-app-statistics/root/usr/share/rpcd/acl.d/luci-app-statistics.json b/applications/luci-app-statistics/root/usr/share/rpcd/acl.d/luci-app-statistics.json new file mode 100644 index 0000000000..2529fca16d --- /dev/null +++ b/applications/luci-app-statistics/root/usr/share/rpcd/acl.d/luci-app-statistics.json @@ -0,0 +1,23 @@ +{ + "luci-app-statistics": { + "description": "Grant access to statistics resources", + "read": { + "cgi-io": [ "read", "exec" ], + "file": { + "/etc/filesystems": [ "read" ], + "/etc/group": [ "read" ], + "/etc/passwd": [ "read" ], + "/proc/filesystems": [ "read" ], + "/proc/interrupts": [ "read" ], + "/proc/mounts": [ "read" ], + "/proc/partitions": [ "read" ], + "/proc/sys/kernel/hostname": [ "read" ], + "/usr/bin/rrdtool graph - -a PNG *": [ "exec" ], + "/usr/sbin/iptables-save": [ "exec" ], + "/usr/sbin/ip6tables-save": [ "exec" ], + "/usr/sbin/sensors -j": [ "exec" ], + "/usr/share/luci/statistics/plugins/*.json": [ "read" ] + } + } + } +} -- 2.30.2