You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/ipn
Brad Fitzpatrick 5611f290eb ipn, ipnserver: only require sudo on Linux for mutable CLI actions
This partially reverts d6e9fb1df0, which modified the permissions
on the tailscaled Unix socket and thus required "sudo tailscale" even
for "tailscale status".

Instead, open the permissions back up (on Linux only) but have the
server look at the peer creds and only permit read-only actions unless
you're root.

In the future we'll also have a group that can do mutable actions.

On OpenBSD and FreeBSD, the permissions on the socket remain locked
down to 0600 from d6e9fb1df0.

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
4 years ago
..
ipnserver ipn, ipnserver: only require sudo on Linux for mutable CLI actions 4 years ago
ipnstate cmd/tailscale: change formatting of "tailscale status" 4 years ago
policy ipn, ipn/policy: filter portlist to a short list of "interesting" ports 5 years ago
backend.go ipn, ipn/ipnserver: add IPN state for server in use, handle explicitly 4 years ago
doc.go Move Linux client & common packages into a public repo. 5 years ago
fake_test.go cmd/tailscale/cli: add basic 'down' subcommand 4 years ago
handle.go all: replace wgcfg.IP and wgcfg.CIDR with netaddr types 4 years ago
local.go ipn: only send services in Hostinfo if Tailnet has opted-in to services collection (#1107) 4 years ago
local_test.go Add names to test cases in ipn/local_test.go. 4 years ago
loglines_test.go cmd/tailscaled, wgengine/netstack: add start of gvisor userspace netstack work 4 years ago
message.go ipn, ipnserver: only require sudo on Linux for mutable CLI actions 4 years ago
message_test.go ipn, ipnserver: only require sudo on Linux for mutable CLI actions 4 years ago
prefs.go all: adjust Unix permissions for those without umasks 4 years ago
prefs_clone.go all: replace wgcfg.IP and wgcfg.CIDR with netaddr types 4 years ago
prefs_test.go wgkey: new package 4 years ago
store.go wgkey: new package 4 years ago
store_test.go Add tstest.PanicOnLog(), and fix various problems detected by this. 5 years ago