luci-proto-wireguard: grant uci read access to system and ddns config

The configuration export requires access to /e/c/system and /e/c/ddns for
external hostname hints.

Fixes: #5838
Fixes: 9ba20645b0 ("luci-proto-wireguard: rewrite protocol handler")
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 4769bf11aa5d33cda4785faec8046c67cb51a606)

diff --git a/protocols/luci-proto-wireguard/root/usr/share/rpcd/acl.d/luci-wireguard.json b/protocols/luci-proto-wireguard/root/usr/share/rpcd/acl.d/luci-wireguard.json
index 079be14793c7bebd6c581e8a9261d1dad2b35cb3..674deb6c7de083dcf66bb832d9036fdb361eaa1e 100644 (file)
--- a/protocols/luci-proto-wireguard/root/usr/share/rpcd/acl.d/luci-wireguard.json
+++ b/protocols/luci-proto-wireguard/root/usr/share/rpcd/acl.d/luci-wireguard.json
@@ -4,7 +4,8 @@
                "read": {
                        "file": {
                                "/usr/bin/qrencode --inline --8bit --type=SVG --output=- -- *": [ "exec" ]
-                       }
+                       },
+                       "uci": [ "ddns", "system" ]
                },
                "write": {
                        "ubus": {