You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Aaron Klotz 95671b71a6 ipn, safesocket: use Windows token in LocalAPI ... On Windows, the idiomatic way to check access on a named pipe is for the server to impersonate the client on its current OS thread, perform access checks using the client's access token, and then revert the OS thread's access token back to its true self. The access token is a better representation of the client's rights than just a username/userid check, as it represents the client's effective rights at connection time, which might differ from their normal rights. This patch updates safesocket to do the aforementioned impersonation, extract the token handle, and then revert the impersonation. We retain the token handle for the remaining duration of the connection (the token continues to be valid even after we have reverted back to self). Since the token is a property of the connection, I changed ipnauth to wrap the concrete net.Conn to include the token. I then plumbed that change through ipnlocal, ipnserver, and localapi as necessary. I also added a PermitLocalAdmin flag to the localapi Handler which I intend to use for controlling access to a few new localapi endpoints intended for configuring auto-update. Updates https://github.com/tailscale/tailscale/issues/755 Signed-off-by: Aaron Klotz <aaron@tailscale.com>		1 year ago
..
testdata	ipn/ipnlocal: fix the path for writing cert files (#7203)	2 years ago
breaktcp_darwin.go	cmd/tailscale: add debug commands to break connections	1 year ago
breaktcp_linux.go	cmd/tailscale: add debug commands to break connections	1 year ago
c2n.go	clientupdate: distinguish when auto-updates are possible (#9896)	1 year ago
c2n_pprof.go	tailcfg: move LogHeapPprof from Debug to c2n [capver 69]	1 year ago
cert.go	ipn/ipnlocal: do unexpired cert renewals in the background	1 year ago
cert_js.go	ipn/ipnlocal: do unexpired cert renewals in the background	1 year ago
cert_test.go	all: use Go 1.21 slices, maps instead of x/exp/{slices,maps}	1 year ago
dnsconfig_test.go	types/netmap: remove NetworkMap.{Addresses,MachineStatus}	1 year ago
expiry.go	types/netmap, all: make NetworkMap.SelfNode a tailcfg.NodeView	1 year ago
expiry_test.go	types/netmap, all: make NetworkMap.SelfNode a tailcfg.NodeView	1 year ago
local.go	ipn, safesocket: use Windows token in LocalAPI	1 year ago
local_test.go	ipn/ipnlocal: plumb ExitNodeDNSResolvers for IsWireGuardOnly exit nodes	1 year ago
loglines_test.go	tsd: add package with System type to unify subsystem init, discovery	2 years ago
network-lock.go	ipn/ipnlocal: add tailnet MagicDNS name to ipn.LoginProfile	1 year ago
network-lock_test.go	ipn/ipnlocal: add tailnet MagicDNS name to ipn.LoginProfile	1 year ago
peerapi.go	taildrop: switch hashing to be streaming based (#9861)	1 year ago
peerapi_h2c.go	all: update copyright and license headers	2 years ago
peerapi_macios_ext.go	all: update copyright and license headers	2 years ago
peerapi_test.go	taildrop: implement asynchronous file deletion (#9844)	1 year ago
profiles.go	Revert "ipn/ipnlocal: add new DNS and subnet router policies" (#9962)	1 year ago
profiles_notwindows.go	ipn/ipnlocal: fix profile duplication	1 year ago
profiles_test.go	ipn/ipnlocal: add tailnet MagicDNS name to ipn.LoginProfile	1 year ago
profiles_windows.go	Revert "ipn/ipnlocal: add new DNS and subnet router policies" (#9962)	1 year ago
serve.go	ipn/ipnlocal: prevent changing serve config if conf.Locked	1 year ago
serve_test.go	ipn/ipnlocal: close connections for removed proxy transports (#9884)	1 year ago
ssh.go	all: use Go 1.21 slices, maps instead of x/exp/{slices,maps}	1 year ago
ssh_stub.go	all: update copyright and license headers	2 years ago
ssh_test.go	ipn/ipnlocal: drop not required StateKey parameter	2 years ago
state_test.go	ipn/ipnlocal: add tailnet MagicDNS name to ipn.LoginProfile	1 year ago