From 8178ac15b672870d3143bff84c37bbeb92e23f2d Mon Sep 17 00:00:00 2001 From: Jo-Philipp Wich Date: Thu, 12 Sep 2019 14:42:12 +0200 Subject: [PATCH] luci-base: whitelist file/write actions on /etc/rc.local Signed-off-by: Jo-Philipp Wich --- modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json b/modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json index a0852eaec..f2ee7ce2c 100644 --- a/modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json +++ b/modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json @@ -23,6 +23,7 @@ "file": { "/": [ "list" ], "/*": [ "list" ], + "/etc/rc.local": [ "read" ], "/proc/sys/kernel/hostname": [ "read" ] }, "ubus": { @@ -39,10 +40,11 @@ "write": { "cgi-io": [ "upload", "/etc/luci-uploads/*" ], "file": { - "/etc/luci-uploads/*": [ "write" ] + "/etc/luci-uploads/*": [ "write" ], + "/etc/rc.local": [ "write" ] }, "ubus": { - "file": [ "remove" ], + "file": [ "write", "remove" ], "iwinfo": [ "scan" ], "luci": [ "setInitAction", "setLocaltime" ], "uci": [ "add", "apply", "confirm", "delete", "order", "set", "rename" ] -- 2.25.1