fix: Add ACL permissions for firewall bouncer RPC methods
Added missing RPCD ACL permissions for the new firewall bouncer management methods to resolve "Access denied" errors. ACL Changes: - Added read permissions: * firewall_bouncer_status - Get service and nftables status * firewall_bouncer_config - Read UCI configuration * nftables_stats - Get blocked IPs and rules statistics - Added write permissions: * control_firewall_bouncer - Start/stop/restart/enable/disable service * update_firewall_bouncer_config - Modify UCI settings These permissions allow the bouncers page to fully manage the firewall bouncer service through the LuCI web interface. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
This commit is contained in:
parent
ba64563b3f
commit
82d1aa37aa
@ -15,7 +15,10 @@
|
|||||||
"seccubox_logs",
|
"seccubox_logs",
|
||||||
"waf_status",
|
"waf_status",
|
||||||
"metrics_config",
|
"metrics_config",
|
||||||
"collections"
|
"collections",
|
||||||
|
"firewall_bouncer_status",
|
||||||
|
"firewall_bouncer_config",
|
||||||
|
"nftables_stats"
|
||||||
],
|
],
|
||||||
"file": [ "read", "stat" ]
|
"file": [ "read", "stat" ]
|
||||||
},
|
},
|
||||||
@ -32,7 +35,9 @@
|
|||||||
"remove_collection",
|
"remove_collection",
|
||||||
"update_hub",
|
"update_hub",
|
||||||
"register_bouncer",
|
"register_bouncer",
|
||||||
"delete_bouncer"
|
"delete_bouncer",
|
||||||
|
"control_firewall_bouncer",
|
||||||
|
"update_firewall_bouncer_config"
|
||||||
]
|
]
|
||||||
},
|
},
|
||||||
"uci": [ "crowdsec-dashboard" ]
|
"uci": [ "crowdsec-dashboard" ]
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user