You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/ipn
Adrian Dewhurst 1a4d423328 ipn/ipnlocal: add additional syspolicy enforcement
This adds support for enforcing exit node LAN access, DNS and subnet
routes.

Adding new preference policies was getting repetitive, so this turns
some of the boilerplate into a table.

Updates tailscale/corp#15585
Updates ENG-2240

Change-Id: Iabd3c42b0ae120b3145fac066c5caa7fc4d67824
Signed-off-by: Adrian Dewhurst <adrian@tailscale.com>
2 years ago
..
conffile ipn/{conffile,ipnlocal}: start booting tailscaled from a config file w/ auth key 2 years ago
ipnauth ipn/ipnauth: improve the Windows token administrator check 2 years ago
ipnlocal ipn/ipnlocal: add additional syspolicy enforcement 2 years ago
ipnserver all: fix nilness issues 2 years ago
ipnstate ipn/ipnstate: add AllowedIPs to PeerStatus 2 years ago
localapi ipn/localapi: use clientupdate.CanAutoUpdate from serveUpdateCheck 2 years ago
policy ipn,tailconfig: clean up unreleased and removed app connector service 2 years ago
store cmd/k8s-operator,ipn/store/kubestore: patch secrets instead of updating 2 years ago
backend.go cmd/tailscale,ipn/ipnlocal: print debug component names 2 years ago
conf.go ipn: add user pref for running web client 2 years ago
doc.go all: update copyright and license headers 3 years ago
fake_test.go all: update copyright and license headers 3 years ago
ipn_clone.go linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter 2 years ago
ipn_test.go net/packet: split off checksum munging into different pkg 2 years ago
ipn_view.go linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter 2 years ago
prefs.go linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter 2 years ago
prefs_test.go linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter 2 years ago
serve.go ipn/localapi: require local Windows admin to set serve path (#9969) 2 years ago
serve_test.go ipn/localapi: require local Windows admin to set serve path (#9969) 2 years ago
store.go taildrop: lazily perform full deletion scan after first taildrop use (#10137) 2 years ago
store_test.go ipn: avoid useless no-op WriteState calls 2 years ago