You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/ipn
Adrian Dewhurst 1a4d423328 ipn/ipnlocal: add additional syspolicy enforcement
This adds support for enforcing exit node LAN access, DNS and subnet
routes.

Adding new preference policies was getting repetitive, so this turns
some of the boilerplate into a table.

Updates tailscale/corp#15585
Updates ENG-2240

Change-Id: Iabd3c42b0ae120b3145fac066c5caa7fc4d67824
Signed-off-by: Adrian Dewhurst <adrian@tailscale.com>
6 months ago
..
conffile ipn/{conffile,ipnlocal}: start booting tailscaled from a config file w/ auth key 8 months ago
ipnauth ipn/ipnauth: improve the Windows token administrator check 7 months ago
ipnlocal ipn/ipnlocal: add additional syspolicy enforcement 6 months ago
ipnserver all: fix nilness issues 6 months ago
ipnstate ipn/ipnstate: add AllowedIPs to PeerStatus 6 months ago
localapi ipn/localapi: use clientupdate.CanAutoUpdate from serveUpdateCheck 6 months ago
policy ipn,tailconfig: clean up unreleased and removed app connector service 7 months ago
store cmd/k8s-operator,ipn/store/kubestore: patch secrets instead of updating 9 months ago
backend.go cmd/tailscale,ipn/ipnlocal: print debug component names 8 months ago
conf.go ipn: add user pref for running web client 7 months ago
doc.go all: update copyright and license headers 1 year ago
fake_test.go all: update copyright and license headers 1 year ago
ipn_clone.go linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter 6 months ago
ipn_test.go net/packet: split off checksum munging into different pkg 8 months ago
ipn_view.go linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter 6 months ago
prefs.go linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter 6 months ago
prefs_test.go linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter 6 months ago
serve.go ipn/localapi: require local Windows admin to set serve path (#9969) 8 months ago
serve_test.go ipn/localapi: require local Windows admin to set serve path (#9969) 8 months ago
store.go taildrop: lazily perform full deletion scan after first taildrop use (#10137) 7 months ago
store_test.go ipn: avoid useless no-op WriteState calls 10 months ago