{
    "luci-app-mihomo": {
        "description": "Grant access to mihomo procedures",
        "read": {
            "uci": [ "mihomo" ],
            "ubus": {
                "service": [ "list" ]
            },
            "file": {
                "/etc/passwd": ["read"],
                "/etc/group": ["read"],
                "/etc/mihomo/profiles/*.yaml": ["read"],
                "/etc/mihomo/profiles/*.yml": ["read"],
                "/etc/mihomo/subscriptions/*.yaml": ["read"],
                "/etc/mihomo/subscriptions/*.yml": ["read"],
                "/etc/mihomo/mixin.yaml": ["read"],
                "/etc/mihomo/run/config.yaml": ["read"],
                "/etc/mihomo/nftables/reserved_ip.nft": ["read"],
                "/etc/mihomo/nftables/reserved_ip6.nft": ["read"],
                "/var/log/mihomo/*.log": ["read"],
                "/usr/libexec/mihomo-call": ["exec"]
            }
        },
        "write": {
            "uci": [ "mihomo" ],
            "file": {
                "/etc/mihomo/profiles/*.yaml": ["write"],
                "/etc/mihomo/profiles/*.yml": ["write"],
                "/etc/mihomo/subscriptions/*.yaml": ["write"],
                "/etc/mihomo/subscriptions/*.yml": ["write"],
                "/etc/mihomo/mixin.yaml": ["write"],
                "/etc/mihomo/run/config.yaml": ["write"],
                "/etc/mihomo/nftables/reserved_ip.nft": ["write"],
                "/etc/mihomo/nftables/reserved_ip6.nft": ["write"]
            }
        }
    }
}