From: Sergey Ponomarev <stokito@gmail.com>
Date: Sun, 4 Feb 2024 13:16:47 +0000 (+0200)
Subject: luci-app-cloudflared: fix ACL for uploading a file
X-Git-Url: http://git.openwrt.org/%22https:/collectd.org//%22/%22https:/collectd.org/%22?a=commitdiff_plain;h=9551c03f6830e5543f2ea5fa96f02fa86f2378bb;p=project%2Fluci.git

luci-app-cloudflared: fix ACL for uploading a file

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
---

diff --git a/applications/luci-app-cloudflared/root/usr/share/rpcd/acl.d/luci-app-cloudflared.json b/applications/luci-app-cloudflared/root/usr/share/rpcd/acl.d/luci-app-cloudflared.json
index 3013b35dba..287110f4d5 100644
--- a/applications/luci-app-cloudflared/root/usr/share/rpcd/acl.d/luci-app-cloudflared.json
+++ b/applications/luci-app-cloudflared/root/usr/share/rpcd/acl.d/luci-app-cloudflared.json
@@ -7,13 +7,16 @@
 				"service": [ "list" ]
 			},
 			"file": {
-				"/var/log/cloudflared.log": [ "read" ],
-				"/usr/bin/cloudflared *": [ "exec" ]
+				"/etc/cloudflared/*": [ "read" ],
+				"/var/log/cloudflared.log": [ "read" ]
 			}
 		},
 		"write": {
 			"uci": [ "cloudflared" ],
-			"file": [ "/etc/cloudflared/" ]
+			"file": {
+				"/etc/cloudflared/*": [ "write" ],
+				"/usr/bin/cloudflared *": [ "exec" ]
+			}
 		}
 	}
 }
\ No newline at end of file