mirror of https://github.com/tailscale/tailscale/
all: use named pipes on windows
Signed-off-by: Maisem Ali <maisem@tailscale.com>pull/6562/head
Maisem Ali
2 years ago
committed by
Maisem Ali
parent
45042a76cd
commit
adc302f428
@ -0,0 +1,24 @@
|
|||||||
|
// Copyright (c) 2022 Tailscale Inc & AUTHORS All rights reserved.
|
||||||
|
// Use of this source code is governed by a BSD-style
|
||||||
|
// license that can be found in the LICENSE file.
|
||||||
|
|
||||||
|
//go:build !windows
|
||||||
|
|
||||||
|
package ipnauth
|
||||||
|
|
||||||
|
import (
|
||||||
|
"net"
|
||||||
|
|
||||||
|
"inet.af/peercred"
|
||||||
|
"tailscale.com/types/logger"
|
||||||
|
)
|
||||||
|
|
||||||
|
// GetConnIdentity extracts the identity information from the connection
|
||||||
|
// based on the user who owns the other end of the connection.
|
||||||
|
// and couldn't. The returned connIdentity has NotWindows set to true.
|
||||||
|
func GetConnIdentity(_ logger.Logf, c net.Conn) (ci *ConnIdentity, err error) {
|
||||||
|
ci = &ConnIdentity{conn: c, notWindows: true}
|
||||||
|
_, ci.isUnixSock = c.(*net.UnixConn)
|
||||||
|
ci.creds, _ = peercred.Get(c)
|
||||||
|
return ci, nil
|
||||||
|
}
|
||||||
@ -0,0 +1,59 @@
|
|||||||
|
// Copyright (c) 2022 Tailscale Inc & AUTHORS All rights reserved.
|
||||||
|
// Use of this source code is governed by a BSD-style
|
||||||
|
// license that can be found in the LICENSE file.
|
||||||
|
|
||||||
|
package ipnauth
|
||||||
|
|
||||||
|
import (
|
||||||
|
"fmt"
|
||||||
|
"net"
|
||||||
|
"syscall"
|
||||||
|
"unsafe"
|
||||||
|
|
||||||
|
"golang.org/x/sys/windows"
|
||||||
|
"tailscale.com/ipn"
|
||||||
|
"tailscale.com/types/logger"
|
||||||
|
"tailscale.com/util/pidowner"
|
||||||
|
)
|
||||||
|
|
||||||
|
var (
|
||||||
|
kernel32 = syscall.NewLazyDLL("kernel32.dll")
|
||||||
|
procGetNamedPipeClientProcessId = kernel32.NewProc("GetNamedPipeClientProcessId")
|
||||||
|
)
|
||||||
|
|
||||||
|
func getNamedPipeClientProcessId(h windows.Handle) (pid uint32, err error) {
|
||||||
|
r1, _, err := procGetNamedPipeClientProcessId.Call(uintptr(h), uintptr(unsafe.Pointer(&pid)))
|
||||||
|
if r1 > 0 {
|
||||||
|
return pid, nil
|
||||||
|
}
|
||||||
|
return 0, err
|
||||||
|
}
|
||||||
|
|
||||||
|
// GetConnIdentity extracts the identity information from the connection
|
||||||
|
// based on the user who owns the other end of the connection.
|
||||||
|
// If c is not backed by a named pipe, an error is returned.
|
||||||
|
func GetConnIdentity(logf logger.Logf, c net.Conn) (ci *ConnIdentity, err error) {
|
||||||
|
ci = &ConnIdentity{conn: c}
|
||||||
|
h, ok := c.(interface {
|
||||||
|
Fd() uintptr
|
||||||
|
})
|
||||||
|
if !ok {
|
||||||
|
return ci, fmt.Errorf("not a windows handle: %T", c)
|
||||||
|
}
|
||||||
|
pid, err := getNamedPipeClientProcessId(windows.Handle(h.Fd()))
|
||||||
|
if err != nil {
|
||||||
|
return ci, fmt.Errorf("getNamedPipeClientProcessId: %v", err)
|
||||||
|
}
|
||||||
|
ci.pid = int(pid)
|
||||||
|
uid, err := pidowner.OwnerOfPID(ci.pid)
|
||||||
|
if err != nil {
|
||||||
|
return ci, fmt.Errorf("failed to map connection's pid to a user (WSL?): %w", err)
|
||||||
|
}
|
||||||
|
ci.userID = ipn.WindowsUserID(uid)
|
||||||
|
u, err := LookupUserFromID(logf, uid)
|
||||||
|
if err != nil {
|
||||||
|
return ci, fmt.Errorf("failed to look up user from userid: %w", err)
|
||||||
|
}
|
||||||
|
ci.user = u
|
||||||
|
return ci, nil
|
||||||
|
}
|
||||||
Loading…
Reference in New Issue