You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/ipn
Adrian Dewhurst 1a4d423328 ipn/ipnlocal: add additional syspolicy enforcement
This adds support for enforcing exit node LAN access, DNS and subnet
routes.

Adding new preference policies was getting repetitive, so this turns
some of the boilerplate into a table.

Updates tailscale/corp#15585
Updates ENG-2240

Change-Id: Iabd3c42b0ae120b3145fac066c5caa7fc4d67824
Signed-off-by: Adrian Dewhurst <adrian@tailscale.com>
10 months ago
..
conffile ipn/{conffile,ipnlocal}: start booting tailscaled from a config file w/ auth key 12 months ago
ipnauth ipn/ipnauth: improve the Windows token administrator check 11 months ago
ipnlocal ipn/ipnlocal: add additional syspolicy enforcement 10 months ago
ipnserver all: fix nilness issues 10 months ago
ipnstate ipn/ipnstate: add AllowedIPs to PeerStatus 10 months ago
localapi ipn/localapi: use clientupdate.CanAutoUpdate from serveUpdateCheck 10 months ago
policy ipn,tailconfig: clean up unreleased and removed app connector service 11 months ago
store cmd/k8s-operator,ipn/store/kubestore: patch secrets instead of updating 1 year ago
backend.go cmd/tailscale,ipn/ipnlocal: print debug component names 1 year ago
conf.go ipn: add user pref for running web client 11 months ago
doc.go all: update copyright and license headers 2 years ago
fake_test.go all: update copyright and license headers 2 years ago
ipn_clone.go linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter 10 months ago
ipn_test.go net/packet: split off checksum munging into different pkg 12 months ago
ipn_view.go linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter 10 months ago
prefs.go linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter 10 months ago
prefs_test.go linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter 10 months ago
serve.go ipn/localapi: require local Windows admin to set serve path (#9969) 11 months ago
serve_test.go ipn/localapi: require local Windows admin to set serve path (#9969) 11 months ago
store.go taildrop: lazily perform full deletion scan after first taildrop use (#10137) 11 months ago
store_test.go ipn: avoid useless no-op WriteState calls 1 year ago