"luci-access": {
"description": "Grant access to basic LuCI procedures",
"read": {
+ "cgi-io": [ "backup", "download" ],
+ "file": {
+ "/": [ "list" ],
+ "/*": [ "list" ],
+ "/dev/mtdblock*": [ "read" ],
+ "/etc/crontabs/root": [ "read" ],
+ "/etc/dropbear/authorized_keys": [ "read" ],
+ "/etc/filesystems": [ "read" ],
+ "/etc/rc.local": [ "read" ],
+ "/etc/sysupgrade.conf": [ "read" ],
+ "/etc/passwd": [ "read" ],
+ "/etc/group": [ "read" ],
+ "/proc/filesystems": [ "read" ],
+ "/proc/mtd": [ "read" ],
+ "/proc/partitions": [ "read" ],
+ "/proc/sys/kernel/hostname": [ "read" ],
+ "/proc/mounts": [ "read" ]
+ },
"ubus": {
- "iwinfo": [ "info" ],
- "luci": [ "boardjson", "duid_hints", "host_hints", "ifaddrs", "initList", "getLocaltime", "leases", "leds", "netdevs", "usb" ],
+ "file": [ "list", "read", "stat" ],
+ "iwinfo": [ "assoclist", "freqlist", "txpowerlist", "countrylist" ],
+ "luci": [ "getDUIDHints", "getHostHints", "getIfaddrs", "getInitList", "getLocaltime", "getTimezones", "getLEDs", "getNetworkDevices", "getUSBDevices", "getWirelessDevices", "getSwconfigFeatures", "getSwconfigPortState", "getBlockDevices", "getMountPoints" ],
+ "luci-rpc": [ "getBoardJSON", "getDHCPLeases" ],
"network.device": [ "status" ],
"network.interface": [ "dump" ],
- "network.wireless": [ "status" ],
"network": [ "get_proto_handlers" ],
+ "system": [ "validate_firmware_image" ],
"uci": [ "changes", "get" ]
},
"uci": [ "*" ]
},
"write": {
+ "cgi-io": [ "upload" ],
+ "file": {
+ "/etc/crontabs/root": [ "write" ],
+ "/etc/dropbear/authorized_keys": [ "write" ],
+ "/etc/luci-uploads/*": [ "write" ],
+ "/etc/rc.local": [ "write" ],
+ "/etc/sysupgrade.conf": [ "write" ],
+ "/sbin/block": [ "exec" ],
+ "/sbin/firstboot": [ "exec" ],
+ "/sbin/reboot": [ "exec" ],
+ "/sbin/sysupgrade": [ "exec" ],
+ "/bin/tar": [ "exec" ],
+ "/tmp/backup.tar.gz": [ "write" ],
+ "/tmp/firmware.bin": [ "write" ]
+ },
"ubus": {
- "luci": [ "initCall", "setLocaltime", "timezone" ],
- "uci": [ "add", "apply", "confirm", "delete", "order", "set" ]
+ "file": [ "write", "remove", "exec" ],
+ "iwinfo": [ "scan" ],
+ "luci": [ "setInitAction", "setLocaltime", "setPassword", "setBlockDetect", "setUmount", "setReboot" ],
+ "uci": [ "add", "apply", "confirm", "delete", "order", "set", "rename" ]
},
"uci": [ "*" ]
}
"description": "Grant access to firewall procedures",
"read": {
"ubus": {
- "luci": [ "conntrack_helpers" ]
+ "luci": [ "getConntrackHelpers" ]
},
"uci": [ "firewall" ]
},