CyberMind-FR
d80501b33a
- Refactor CROWDSEC object to use luci.crowdsec-dashboard RPC instead of file.exec - Add getNftablesStats() for accurate blocked IPs count from firewall bouncer - Update updateDiskUsage() to use luci.system-hub.get_system_status RPC - Update loadSystemLogs() to use luci.system-hub.get_logs RPC - Add proper ACL permissions for luci.crowdsec-dashboard and luci.system-hub - Bump version to 1.5.0-r3 Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
49 lines
1.9 KiB
JSON
49 lines
1.9 KiB
JSON
{
|
|
"secubox-dashboard": {
|
|
"description": "SecuBox Dashboard full access",
|
|
"read": {
|
|
"ubus": {
|
|
"session": ["access", "get", "list"],
|
|
"system": ["board", "info"],
|
|
"network": ["get_proto_handlers"],
|
|
"network.interface": ["dump", "status"],
|
|
"network.device": ["status"],
|
|
"network.wireless": ["status"],
|
|
"service": ["list"],
|
|
"file": ["list", "read", "stat", "exec"],
|
|
"luci": ["getLocaltime", "getTimezones", "getInitList", "getRealtimeStats"],
|
|
"luci-rpc": ["getBoardJSON", "getNetworkDevices", "getDHCPLeases"],
|
|
"luci.crowdsec-dashboard": [
|
|
"decisions", "alerts", "metrics", "bouncers", "machines",
|
|
"hub", "status", "stats", "nftables_stats", "firewall_bouncer_status",
|
|
"firewall_bouncer_config", "health_check", "acquisition_config",
|
|
"acquisition_metrics", "console_status", "capi_metrics"
|
|
],
|
|
"luci.system-hub": [
|
|
"get_system_status", "get_logs", "get_health_score",
|
|
"get_storage_info", "get_services_status"
|
|
]
|
|
},
|
|
"file": {
|
|
"/etc/crowdsec/*": ["read"],
|
|
"/var/log/*": ["read"],
|
|
"/tmp/*": ["read"]
|
|
}
|
|
},
|
|
"write": {
|
|
"ubus": {
|
|
"file": ["exec"],
|
|
"service": ["signal", "delete"],
|
|
"system": ["reboot"],
|
|
"network.interface": ["up", "down", "renew"],
|
|
"luci.crowdsec-dashboard": [
|
|
"ban", "unban", "service_control", "update_hub"
|
|
]
|
|
},
|
|
"file": {
|
|
"/tmp/*": ["write"]
|
|
}
|
|
}
|
|
}
|
|
}
|