Skip to content

luci-app-mwan3: add resolveDefault to rule.js - #8979

Open
ckorber wants to merge 1 commit into
openwrt:masterfrom
ckorber:pr/mwan3_acl_error
Open

luci-app-mwan3: add resolveDefault to rule.js#8979
ckorber wants to merge 1 commit into
openwrt:masterfrom
ckorber:pr/mwan3_acl_error

Conversation

@ckorber

@ckorber ckorber commented Aug 25, 2026

Copy link
Copy Markdown
Contributor

Pull request details

Description

rule.js reports an error stating that access to command is denied. This is caused by the call to fs.exec_direct for /usr/libexec/luci-mwan3 ipset dump in the load function. Dump does not write names on my setup leading to the error.

Thus, hardening the call for cases, when the result is empty, is reasonable.

Screenshot or video of changes (if applicable)

Before
image

After
image

Maintainer (preferred)

@systemcrash @feckert


Tested on

OpenWrt version: openwrt-25.12
LuCI version: luci openwrt-25.12
Web browser(s): firefox


@openwrt-ai openwrt-ai left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed 1 new commit. The commit message matches its diff, but the change itself looks like a no-op — see the inline comment on the ACL entry.


Generated by Claude Code

Comment thread applications/luci-app-mwan3/root/usr/share/rpcd/acl.d/luci-app-mwan3.json Outdated
@ckorber
ckorber marked this pull request as draft August 25, 2026 18:08
Hardening the call for cases if the command is unavailable.

Signed-off-by: Christian Korber <ckorber@tdt.de>
@ckorber
ckorber force-pushed the pr/mwan3_acl_error branch from 66b465c to e381d3b Compare August 25, 2026 19:27
@ckorber
ckorber marked this pull request as ready for review August 25, 2026 19:27

@openwrt-ai openwrt-ai left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Re-reviewed after the force-push. The ACL change from the previous head is gone and replaced with the L.resolveDefault() hardening — the new commit message matches its diff, so no commit-check findings. CI is green on e381d3b. Two inline notes: the underlying denial still appears unexplained (the in-tree ACL grant looks correct), and the PR title/body are stale relative to what the diff now does.


Generated by Claude Code

@ckorber
ckorber marked this pull request as draft August 26, 2026 05:22
@ckorber ckorber changed the title luci-app-mwan3: fix acl error luci-app-mwan3: add resolveDefault to rule.js Aug 26, 2026
@ckorber
ckorber marked this pull request as ready for review August 26, 2026 09:38
@ckorber
ckorber requested a review from openwrt-ai August 26, 2026 09:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants