You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/ipn/ipnlocal
shayne 4471e403aa
ipn/ipnlocal: [serve] listen on all-interfaces for macOS sandboxed (#6771)
On macOS (AppStore and macsys), we need to bind to ""/all-interfaces
due to the network sandbox. Ideally we would only bind to the
Tailscale interface, but macOS errors out if we try to
to listen on privileged ports binding only to a specific
interface.

We also implement the lc.Control hook, same as we do for
peerapi. It doesn't solve our problem but it's better that
we do and would likely be required when Apple gets around to
fixing per-interface priviliged port binding.

Fixes: #6364

Signed-off-by: Shayne Sweeney <shayne@tailscale.com>
2 years ago
..
c2n.go ipn/ipnlocal: add c2n handler to flush logtail for support debugging 2 years ago
cert.go ipn/{ipnlocal,localapi}: move most of cert.go to ipnlocal 2 years ago
cert_js.go ipn/ipnlocal, wgengine/netstack: start handling ports for future serving 2 years ago
cert_test.go ipn/{ipnlocal,localapi}: move most of cert.go to ipnlocal 2 years ago
dnsconfig_test.go ipn/ipnlocal: use ipn.PrefsView 2 years ago
expiry.go ipn/ipnlocal: move handling of expired nodes to LocalBackend 2 years ago
expiry_test.go ipn/ipnlocal: move handling of expired nodes to LocalBackend 2 years ago
local.go all: start groundwork for using capver for localapi & peerapi 2 years ago
local_test.go ipn/{ipnlocal,localapi}: ensure watcher is installed before /watch-ipn-bus/ responds with 200 2 years ago
loglines_test.go ipn/ipnlocal: add support for multiple user profiles 2 years ago
network-lock.go health,ipn/ipnlocal: report the node being locked out as a health issue 2 years ago
network-lock_test.go cmd/tailscale,tka: make KeyID return an error instead of panicking 2 years ago
peerapi.go ipn/ipnlocal: disallow unsigned peers from WoL 2 years ago
peerapi_h2c.go all: remove old +build tags 2 years ago
peerapi_macios_ext.go all: remove old +build tags 2 years ago
peerapi_test.go ipn/ipnlocal: improve redactErr to handle more cases 2 years ago
profiles.go ipn/profiles: set default prefs based on Windows registry (#6803) 2 years ago
profiles_test.go ipn/profiles: set default prefs based on Windows registry (#6803) 2 years ago
serve.go ipn/ipnlocal: [serve] listen on all-interfaces for macOS sandboxed (#6771) 2 years ago
serve_test.go ipn/ipnlocal: support serving files/directories too 2 years ago
ssh.go ssh/tailssh: add OpenBSD support for Tailscale SSH 2 years ago
ssh_stub.go ssh/tailssh: add OpenBSD support for Tailscale SSH 2 years ago
ssh_test.go ipn/ipnlocal: add support for multiple user profiles 2 years ago
state_test.go ipn,types/persist: add DisallowedTKAStateIDs, refactor as view type 2 years ago