op-packages/luci-mod-network/root/usr/share/rpcd/acl.d/luci-mod-network.json
2026-04-23 20:32:35 +08:00

90 lines
2.2 KiB
JSON

{
"luci-mod-network-config": {
"description": "Grant access to network configuration",
"read": {
"cgi-io": [ "exec" ],
"file": {
"/etc/iproute2/rt_tables": [ "read" ],
"/proc/sys/net/ipv6/conf/*/mtu": [ "read" ],
"/proc/sys/net/ipv6/conf/*/hop_limit": [ "read" ],
"/usr/sbin/iw": [ "exec" ],
"/usr/libexec/luci-peeraddr": [ "exec" ],
"/usr/sbin/wlanconfig": [ "exec" ],
"/proc/sys/net/ipv[46]/conf/*": [ "read" ],
"/sys/class/net/*/brport/*": [ "read" ]
},
"ubus": {
"file": [ "exec" ],
"iwinfo": [ "assoclist", "countrylist", "devices", "freqlist", "info", "txpowerlist" ],
"luci": [ "getSwconfigFeatures", "getSwconfigPortState" ],
"network.wireless": [ "status" ]
},
"uci": [ "dhcp", "firewall", "network", "wireless", "system" ]
},
"write": {
"cgi-io": [ "exec" ],
"file": {
"/sbin/ifup": [ "exec" ],
"/sbin/ifdown": [ "exec" ],
"/sbin/wifi": [ "exec" ]
},
"ubus": {
"file": [ "exec" ],
"hostapd.*": [ "del_client" ],
"iwinfo": [ "scan" ]
},
"uci": [ "dhcp", "firewall", "network", "wireless" ]
}
},
"luci-mod-network-dns": {
"description": "Grant access to DNS configuration",
"read": {
"ubus": {
"luci-rpc": [ "getHostHints" ]
},
"uci": [ "dhcp" ]
},
"write": {
"uci": [ "dhcp" ]
}
},
"luci-mod-network-dhcp": {
"description": "Grant access to DHCP configuration",
"read": {
"ubus": {
"luci-rpc": [ "getDHCPLeases", "getDUIDHints", "getHostHints", "getNetworkDevices" ],
"fingerprint": [ "fingerprint" ],
"service": [ "list" ]
},
"uci": [ "dhcp" ]
},
"write": {
"uci": [ "dhcp" ]
}
},
"luci-mod-network-diagnostics": {
"description": "Grant access to network diagnostic tools",
"read": {
"file": {
"/bin/ping": [ "exec" ],
"/bin/ping6": [ "exec", "list" ],
"/bin/traceroute": [ "exec" ],
"/bin/traceroute6": [ "exec", "list" ],
"/usr/bin/nslookup": [ "exec" ],
"/usr/bin/ping": [ "exec" ],
"/usr/bin/ping6": [ "exec", "list" ],
"/usr/bin/traceroute": [ "exec" ],
"/usr/bin/traceroute6": [ "exec", "list" ],
"/usr/bin/arp-scan": [ "exec", "list" ]
},
"ubus": {
"file": [ "exec", "stat" ]
},
"uci": [ "luci" ]
}
}
}