luci/applications/luci-app-opkg/root/usr/share/rpcd/acl.d/luci-app-opkg.json

{
	"luci-app-opkg": {
		"description": "Grant access to opkg management",
		"read": {
			"cgi-io": [ "exec" ],
			"file": {
				"/usr/libexec/opkg-list installed": [ "exec" ],
				"/usr/libexec/opkg-list available": [ "exec" ],
				"/usr/libexec/opkg-call list-installed": [ "exec" ],
				"/usr/libexec/opkg-call list-available": [ "exec" ],
				"/etc/opkg.conf": [ "read" ],
				"/etc/opkg/*.conf": [ "read" ]
			},
			"ubus": {
				"luci": [ "getMountPoints" ]
			}
		},
		"write": {
			"file": {
				"/usr/libexec/opkg-call install *": [ "exec" ],
				"/usr/libexec/opkg-call remove *": [ "exec" ],
				"/usr/libexec/opkg-call update *": [ "exec" ],
				"/etc/opkg.conf": [ "write" ],
				"/etc/opkg/*.conf": [ "write" ],
				"/tmp/upload.ipk": [ "write" ]
			}
		}
	}
}