MoCI/rpcd-acl.json at dev · HudsonGraeme/MoCI · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
{
	"moci": {
		"description": "ACL permissions for MoCI OpenWrt interface",
		"read": {
			"file": {
				"/usr/lib/opkg/status": ["read"],
				"/var/lib/opkg/status": ["read"],
				"/proc/net/dev": ["read"],
				"/proc/net/arp": ["read"],
				"/proc/stat": ["read"],
				"/etc/crontabs/root": ["read"],
				"/etc/dropbear/authorized_keys": ["read"],
				"/etc/hosts": ["read"],
				"/tmp/firmware.bin": ["read"],
				"/tmp/backup.tar.gz": ["read"]
			},
			"ubus": {
				"network.interface": ["dump"],
				"network.wireless": ["status"],
				"uci": ["get"],
				"file": ["read"],
				"system": ["info", "board"],
				"luci-rpc": ["getDHCPLeases"],
				"service": ["list"]
			},
			"uci": ["moci"]
		},
		"write": {
			"ubus": {
				"uci": ["set", "add", "delete", "commit"],
				"file": ["write", "exec"],
				"system": ["reboot"],
				"network.interface": ["up", "down"]
			},
			"uci": [
				"network",
				"wireless",
				"firewall",
				"dhcp",
				"system",
				"qos",
				"ddns"
			]
		}
	}
}