fix: Add ACL permissions for firewall bouncer RPC methods

Added missing RPCD ACL permissions for the new firewall bouncer
management methods to resolve "Access denied" errors.

ACL Changes:
- Added read permissions:
  * firewall_bouncer_status - Get service and nftables status
  * firewall_bouncer_config - Read UCI configuration
  * nftables_stats - Get blocked IPs and rules statistics

- Added write permissions:
  * control_firewall_bouncer - Start/stop/restart/enable/disable service
  * update_firewall_bouncer_config - Modify UCI settings

These permissions allow the bouncers page to fully manage the firewall
bouncer service through the LuCI web interface.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
This commit is contained in:
CyberMind-FR 2026-01-06 20:26:01 +01:00
parent ba64563b3f
commit 82d1aa37aa

View File

@ -15,7 +15,10 @@
"seccubox_logs",
"waf_status",
"metrics_config",
"collections"
"collections",
"firewall_bouncer_status",
"firewall_bouncer_config",
"nftables_stats"
],
"file": [ "read", "stat" ]
},
@ -32,7 +35,9 @@
"remove_collection",
"update_hub",
"register_bouncer",
"delete_bouncer"
"delete_bouncer",
"control_firewall_bouncer",
"update_firewall_bouncer_config"
]
},
"uci": [ "crowdsec-dashboard" ]