CyberMind-FR
0564de0811
Major enhancements to Client Guardian: **Removed Captive Portal:** - Deleted portal.js and captive.js views - Removed portal configuration from UCI - Removed portal RPC methods (get_portal, update_portal, list_sessions, authorize_client, deauthorize_client) - Cleaned menu and ACL definitions - Updated default policy from 'captive' to 'quarantine' **Added Auto-Zoning System:** - Implemented get_vendor_from_mac() for OUI lookups - Added apply_auto_zoning() with rule-based zone assignment - Support for vendor, hostname pattern, and MAC prefix matching - 8 pre-configured auto-zoning rules (IoT devices, mobile, guests) - Auto-parking zone for unmatched clients - GridSection UI for managing auto-zoning rules **Threat Intelligence Integration:** - Added threat_policy UCI section - Auto-ban/quarantine based on threat score thresholds - Threat indicators on client displays - Integration with Security Threats Dashboard **Dashboard Improvements:** - Fixed boolean conversion (UCI "true"/"false" to JSON 0/1) - Fixed RPC expect parameter issues causing empty arrays - Added real-time polling with configurable intervals - Removed all window.location.reload() calls - Smooth DOM updates without page flickers **Settings Enhancements:** - Added reactiveness section (auto-refresh toggle, interval) - Added threat intelligence settings - Removed captive portal settings section - Updated policy descriptions 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
28 lines
1.0 KiB
JSON
28 lines
1.0 KiB
JSON
{
|
|
"luci-app-client-guardian": {
|
|
"description": "Grant access to LuCI Client Guardian Dashboard",
|
|
"read": {
|
|
"ubus": {
|
|
"luci.client-guardian": [ "status", "clients", "get_client", "zones", "parental", "portal", "alerts", "logs", "list_sessions", "get_policy", "list_profiles" ],
|
|
"system": [ "info", "board" ],
|
|
"network.interface": [ "status", "dump" ],
|
|
"file": [ "read", "stat" ]
|
|
},
|
|
"uci": [ "network", "dhcp", "firewall", "client-guardian" ],
|
|
"file": {
|
|
"/etc/config/*": [ "read" ],
|
|
"/tmp/dhcp.leases": [ "read" ],
|
|
"/proc/net/arp": [ "read" ],
|
|
"/var/log/client-guardian.log": [ "read" ]
|
|
}
|
|
},
|
|
"write": {
|
|
"ubus": {
|
|
"luci.client-guardian": [ "approve_client", "ban_client", "quarantine_client", "update_client", "update_zone", "update_portal", "send_test_alert", "set_policy", "authorize_client", "deauthorize_client", "sync_zones", "apply_profile" ],
|
|
"uci": [ "apply", "commit", "set", "delete", "add", "reorder", "changes" ]
|
|
},
|
|
"uci": [ "client-guardian", "firewall" ]
|
|
}
|
|
}
|
|
}
|