From: Jo-Philipp Wich <jo@mein.io>
Date: Sat, 21 Apr 2018 12:59:41 +0000 (+0200)
Subject: luci-base: ship rpcd uci access ACL
X-Git-Url: http://git.archive.openwrt.org/?p=project%2Fluci.git;a=commitdiff_plain;h=628048772db3eb4456a7e73839b2644f5398702d

luci-base: ship rpcd uci access ACL

Ship an ACL definition for granting full read/write access to uci
configuration files via ubus rpc. This is a precondition for enabling
uci session isolation later on.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
---

diff --git a/modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json b/modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json
new file mode 100644
index 000000000..ed7ad8aa8
--- /dev/null
+++ b/modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json
@@ -0,0 +1,11 @@
+{
+	"uci-access": {
+		"description": "Grant uci write access to all configurations",
+		"read": {
+			"uci": [ "*" ]
+		},
+		"write": {
+			"uci": [ "*" ]
+		}
+	}
+}