You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/ipn
Adrian Dewhurst 1a4d423328 ipn/ipnlocal: add additional syspolicy enforcement
This adds support for enforcing exit node LAN access, DNS and subnet
routes.

Adding new preference policies was getting repetitive, so this turns
some of the boilerplate into a table.

Updates tailscale/corp#15585
Updates ENG-2240

Change-Id: Iabd3c42b0ae120b3145fac066c5caa7fc4d67824
Signed-off-by: Adrian Dewhurst <adrian@tailscale.com>
12 months ago
..
conffile ipn/{conffile,ipnlocal}: start booting tailscaled from a config file w/ auth key 1 year ago
ipnauth ipn/ipnauth: improve the Windows token administrator check 1 year ago
ipnlocal ipn/ipnlocal: add additional syspolicy enforcement 12 months ago
ipnserver all: fix nilness issues 12 months ago
ipnstate ipn/ipnstate: add AllowedIPs to PeerStatus 12 months ago
localapi ipn/localapi: use clientupdate.CanAutoUpdate from serveUpdateCheck 12 months ago
policy ipn,tailconfig: clean up unreleased and removed app connector service 1 year ago
store cmd/k8s-operator,ipn/store/kubestore: patch secrets instead of updating 1 year ago
backend.go cmd/tailscale,ipn/ipnlocal: print debug component names 1 year ago
conf.go ipn: add user pref for running web client 1 year ago
doc.go all: update copyright and license headers 2 years ago
fake_test.go all: update copyright and license headers 2 years ago
ipn_clone.go linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter 12 months ago
ipn_test.go net/packet: split off checksum munging into different pkg 1 year ago
ipn_view.go linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter 12 months ago
prefs.go linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter 12 months ago
prefs_test.go linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter 12 months ago
serve.go ipn/localapi: require local Windows admin to set serve path (#9969) 1 year ago
serve_test.go ipn/localapi: require local Windows admin to set serve path (#9969) 1 year ago
store.go taildrop: lazily perform full deletion scan after first taildrop use (#10137) 1 year ago
store_test.go ipn: avoid useless no-op WriteState calls 1 year ago