You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Aaron Klotz fbc18410ad ipn/ipnauth: improve the Windows token administrator check ... (*Token).IsAdministrator is supposed to return true even when the user is running with a UAC limited token. The idea is that, for the purposes of this check, we don't care whether the user is *currently* running with full Admin rights, we just want to know whether the user can *potentially* do so. We accomplish this by querying for the token's "linked token," which should be the fully-elevated variant, and checking its group memberships. We also switch ipn/ipnserver/(*Server).connIsLocalAdmin to use the elevation check to preserve those semantics for tailscale serve; I want the IsAdministrator check to be used for less sensitive things like toggling auto-update on and off. Fixes #10036 Signed-off-by: Aaron Klotz <aaron@tailscale.com>		2 years ago
..
cibuild	all: update copyright and license headers	3 years ago
clientmetric	util/clientmetric: allow client metric values to be provided by a function	3 years ago
cloudenv	all: update copyright and license headers	3 years ago
cmpver	util/cmpver: only consider ascii numerals (#9741)	2 years ago
cmpx	all: update exp/slices and fix call sites	2 years ago
codegen	util/codegen: support embedded fields	3 years ago
cstruct	all: update copyright and license headers	3 years ago
deephash	util/deephash: add IncludeFields, ExcludeFields HasherForType Options	2 years ago
dirwalk	all: use tstest.Replace more	3 years ago
dnsname	cmd/tailscale: extend hostname validation (#7678)	3 years ago
goroutines	util/goroutines: let ScrubbedGoroutineDump get only current stack	2 years ago
groupmember	util/groupmember: fail earlier if group doesn't exist, use slices.Contains	2 years ago
hashx	all: update copyright and license headers	3 years ago
httphdr	util/httphdr: add new package for parsing HTTP headers (#9797)	2 years ago
httpm	util/httpm, all: add a test to make sure httpm is used consistently	2 years ago
jsonutil	all: update copyright and license headers	3 years ago
limiter	util/lru, util/limiter: add debug helper to dump state as HTML	2 years ago
lineread	all: update copyright and license headers	3 years ago
linuxfw	util/linuxfw: add missing error checks in tests	2 years ago
lru	util/lru: update c.head when deleting the most recently used entry	2 years ago
mak	various: add golangci-lint, fix issues (#7905)	3 years ago
multierr	all: use Go 1.21 slices, maps instead of x/exp/{slices,maps}	2 years ago
must	all: update copyright and license headers	3 years ago
nocasemaps	util/nocasemaps: import nocasemaps from corp	2 years ago
osdiag	util/osdiag: add query for Windows page file configuration and status	2 years ago
osshare	all: update copyright and license headers	3 years ago
pidowner	all: update copyright and license headers	3 years ago
precompress	all: update copyright and license headers	3 years ago
quarantine	all: update copyright and license headers	3 years ago
race	util/race: add test to confirm we don't leak goroutines	2 years ago
racebuild	all: update copyright and license headers	3 years ago
rands	util/rands: add package with HexString func	2 years ago
ringbuffer	util/ringbuffer: move generic ringbuffer from corp repo	3 years ago
set	util/set: make Clone a method (#10044)	2 years ago
singleflight	all: update copyright and license headers	3 years ago
slicesx	util/slicesx: add EqualSameNil, like slices.Equal but same nilness	2 years ago
syspolicy	Revert "ipn/ipnlocal: add new DNS and subnet router policies" (#9962)	2 years ago
sysresources	util/sysresources, magicsock: scale DERP buffer based on system memory	3 years ago
systemd	all: update copyright and license headers	3 years ago
testenv	util/testenv: add new package to hold InTest	2 years ago
truncate	util: add truncate package (#7490)	3 years ago
uniq	all: update copyright and license headers	3 years ago
vizerror	util/vizerror: add As function to get wrapped Error	3 years ago
winutil	ipn/ipnauth: improve the Windows token administrator check	2 years ago