From: Jo-Philipp Wich <jo@mein.io>
Date: Thu, 13 Feb 2020 18:33:05 +0000 (+0100)
Subject: luci-app-statistics: add missing ACL rules
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=1d47f0c1a913ccbcba86061daa20e1e336d7b559;p=oweals%2Fluci.git

luci-app-statistics: add missing ACL rules

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
---

diff --git a/applications/luci-app-statistics/root/usr/share/rpcd/acl.d/luci-app-statistics.json b/applications/luci-app-statistics/root/usr/share/rpcd/acl.d/luci-app-statistics.json
new file mode 100644
index 000000000..2529fca16
--- /dev/null
+++ b/applications/luci-app-statistics/root/usr/share/rpcd/acl.d/luci-app-statistics.json
@@ -0,0 +1,23 @@
+{
+	"luci-app-statistics": {
+		"description": "Grant access to statistics resources",
+		"read": {
+			"cgi-io": [ "read", "exec" ],
+			"file": {
+				"/etc/filesystems": [ "read" ],
+				"/etc/group": [ "read" ],
+				"/etc/passwd": [ "read" ],
+				"/proc/filesystems": [ "read" ],
+				"/proc/interrupts": [ "read" ],
+				"/proc/mounts": [ "read" ],
+				"/proc/partitions": [ "read" ],
+				"/proc/sys/kernel/hostname": [ "read" ],
+				"/usr/bin/rrdtool graph - -a PNG *": [ "exec" ],
+				"/usr/sbin/iptables-save": [ "exec" ],
+				"/usr/sbin/ip6tables-save": [ "exec" ],
+				"/usr/sbin/sensors -j": [ "exec" ],
+				"/usr/share/luci/statistics/plugins/*.json": [ "read" ]
+			}
+		}
+	}
+}