DGNum/ubus
6
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

ubusd_acl: event send access list support

Browse source 
Adds event send access list support in ubus via the "send" keyword

Example of a json file:
{
	"user": "superuser",
	"send": [ "wireless.*" ],
}

Signed-off-by: Koen Dergent <koen.cj.dergent@gmail.com>
Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
This commit is contained in:
Hans Dedecker 2018-10-03 15:36:18 +02:00
parent da503db660
commit 221ce7e7ff
3 changed files with 24 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
ubusd_acl.c
View file

@ -52,6 +52,7 @@ struct ubusd_acl_obj {
bool subscribe; bool subscribe;
bool publish; bool publish;
bool listen; bool listen;
bool send;
}; };
struct ubusd_acl_file { struct ubusd_acl_file {
@ -138,6 +139,11 @@ ubusd_acl_check(struct ubus_client *cl, const char *obj,
return 0; return 0;
break; break;
case UBUS_ACL_SEND:
if (acl->send)
return 0;
break;
case UBUS_ACL_ACCESS: case UBUS_ACL_ACCESS:
if (acl->methods) { if (acl->methods) {
struct blob_attr *cur; struct blob_attr *cur;
@ -292,6 +298,13 @@ static void ubusd_acl_add_listen(struct ubusd_acl_file *file, const char *obj)
o->listen = true; o->listen = true;
} }
static void ubusd_acl_add_send(struct ubusd_acl_file *file, const char *obj)
{
struct ubusd_acl_obj *o = ubusd_acl_alloc_obj(file, obj);
o->send = true;
}
enum { enum {
ACL_USER, ACL_USER,
ACL_GROUP, ACL_GROUP,
@ -300,6 +313,7 @@ enum {
ACL_SUBSCRIBE, ACL_SUBSCRIBE,
ACL_INHERIT, ACL_INHERIT,
ACL_LISTEN, ACL_LISTEN,
ACL_SEND,
__ACL_MAX __ACL_MAX
}; };
@ -311,6 +325,7 @@ static const struct blobmsg_policy acl_policy[__ACL_MAX] = {
[ACL_SUBSCRIBE] = { .name = "subscribe", .type = BLOBMSG_TYPE_ARRAY }, [ACL_SUBSCRIBE] = { .name = "subscribe", .type = BLOBMSG_TYPE_ARRAY },
[ACL_INHERIT] = { .name = "inherit", .type = BLOBMSG_TYPE_ARRAY }, [ACL_INHERIT] = { .name = "inherit", .type = BLOBMSG_TYPE_ARRAY },
[ACL_LISTEN] = { .name= "listen", .type = BLOBMSG_TYPE_ARRAY }, [ACL_LISTEN] = { .name= "listen", .type = BLOBMSG_TYPE_ARRAY },
[ACL_SEND] = { .name= "send", .type = BLOBMSG_TYPE_ARRAY },
}; };
static void static void
@ -347,6 +362,11 @@ ubusd_acl_file_add(struct ubusd_acl_file *file)
blobmsg_for_each_attr(cur, tb[ACL_LISTEN], rem) blobmsg_for_each_attr(cur, tb[ACL_LISTEN], rem)
if (blobmsg_type(cur) == BLOBMSG_TYPE_STRING) if (blobmsg_type(cur) == BLOBMSG_TYPE_STRING)
ubusd_acl_add_listen(file, blobmsg_get_string(cur)); ubusd_acl_add_listen(file, blobmsg_get_string(cur));
if (tb[ACL_SEND])
blobmsg_for_each_attr(cur, tb[ACL_SEND], rem)
if (blobmsg_type(cur) == BLOBMSG_TYPE_STRING)
ubusd_acl_add_send(file, blobmsg_get_string(cur));
} }
static void static void

1
ubusd_acl.h
View file

@ -19,6 +19,7 @@ enum ubusd_acl_type {
UBUS_ACL_SUBSCRIBE, UBUS_ACL_SUBSCRIBE,
UBUS_ACL_ACCESS, UBUS_ACL_ACCESS,
UBUS_ACL_LISTEN, UBUS_ACL_LISTEN,
UBUS_ACL_SEND,
}; };
int ubusd_acl_check(struct ubus_client *cl, const char *obj, const char *method, enum ubusd_acl_type type); int ubusd_acl_check(struct ubus_client *cl, const char *obj, const char *method, enum ubusd_acl_type type);

3
ubusd_event.c
View file

@ -142,6 +142,9 @@ int ubusd_send_event(struct ubus_client *cl, const char *id,
struct event_source *ev; struct event_source *ev;
int match_len = 0; int match_len = 0;
if (ubusd_acl_check(cl, id, NULL, UBUS_ACL_SEND))
return UBUS_STATUS_PERMISSION_DENIED;
obj_event_seq++; obj_event_seq++;
/* /*