From 38629b62fc89ad074ccdd6e76175b76004f5183d Mon Sep 17 00:00:00 2001
From: Brad Fitzpatrick <bradfitz@tailscale.com>
Date: Wed, 17 Feb 2021 15:45:50 -0800
Subject: [PATCH] cmd/tailscaled: on darwin, fail early if not root with nicer
 message

Don't do it on all platforms, as Linux folk might be playing
container + capability games.
---
 cmd/tailscaled/tailscaled.go | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/cmd/tailscaled/tailscaled.go b/cmd/tailscaled/tailscaled.go
index e9691a5dc..0110c8a75 100644
--- a/cmd/tailscaled/tailscaled.go
+++ b/cmd/tailscaled/tailscaled.go
@@ -131,7 +131,13 @@ func main() {
 		os.Exit(0)
 	}
 
+	if runtime.GOOS == "darwin" && os.Getuid() != 0 {
+		log.SetFlags(0)
+		log.Fatalf("tailscaled requires root; use sudo tailscaled")
+	}
+
 	if args.socketpath == "" && runtime.GOOS != "windows" {
+		log.SetFlags(0)
 		log.Fatalf("--socket is required")
 	}