You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Adrian Dewhurst 1a4d423328 ipn/ipnlocal: add additional syspolicy enforcement ... This adds support for enforcing exit node LAN access, DNS and subnet routes. Adding new preference policies was getting repetitive, so this turns some of the boilerplate into a table. Updates tailscale/corp#15585 Updates ENG-2240 Change-Id: Iabd3c42b0ae120b3145fac066c5caa7fc4d67824 Signed-off-by: Adrian Dewhurst <adrian@tailscale.com>		7 months ago
..
testdata	ipn/ipnlocal: fix the path for writing cert files (#7203)	1 year ago
breaktcp_darwin.go	cmd/tailscale: add debug commands to break connections	11 months ago
breaktcp_linux.go	cmd/tailscale: add debug commands to break connections	11 months ago
c2n.go	linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter	7 months ago
c2n_pprof.go	tailcfg: move LogHeapPprof from Debug to c2n [capver 69]	11 months ago
c2n_test.go	ipn/ipnlocal: add c2n method to check on TLS cert fetch status	7 months ago
cert.go	all: fix nilness issues	7 months ago
cert_js.go	ipn/ipnlocal: add c2n method to check on TLS cert fetch status	7 months ago
cert_test.go	all: use Go 1.21 slices, maps instead of x/exp/{slices,maps}	11 months ago
dnsconfig_test.go	types/netmap: remove NetworkMap.{Addresses,MachineStatus}	9 months ago
expiry.go	ssh/tailssh: use control server time instead of local time	7 months ago
expiry_test.go	types/netmap, all: make NetworkMap.SelfNode a tailcfg.NodeView	10 months ago
local.go	ipn/ipnlocal: add additional syspolicy enforcement	7 months ago
local_test.go	ipn/ipnlocal: add additional syspolicy enforcement	7 months ago
loglines_test.go	tsd: add package with System type to unify subsystem init, discovery	1 year ago
network-lock.go	ipn/ipnlocal,cmd/tailscale: persist tailnet name in user profile	7 months ago
network-lock_test.go	ipn/ipnlocal,cmd/tailscale: persist tailnet name in user profile	7 months ago
peerapi.go	wgengine/magicsock: add DERP homeless debug mode for testing	7 months ago
peerapi_h2c.go	all: update copyright and license headers	1 year ago
peerapi_macios_ext.go	all: update copyright and license headers	1 year ago
peerapi_test.go	ipn/ipnlocal,cmd/tailscale: persist tailnet name in user profile	7 months ago
profiles.go	ipn/ipnlocal: better enforce system policies	7 months ago
profiles_notwindows.go	ipn/ipnlocal: fix profile duplication	11 months ago
profiles_test.go	ipn/ipnlocal,cmd/tailscale: persist tailnet name in user profile	7 months ago
profiles_windows.go	ipn/ipnlocal: better enforce system policies	7 months ago
serve.go	ipn/ipnlocal: log and don't return full file serve error (#10174)	7 months ago
serve_test.go	ipn/ipnlocal: close connections for removed proxy transports (#9884)	8 months ago
ssh.go	all: use Go 1.21 slices, maps instead of x/exp/{slices,maps}	11 months ago
ssh_stub.go	all: update copyright and license headers	1 year ago
ssh_test.go	ipn/ipnlocal: drop not required StateKey parameter	1 year ago
state_test.go	ipn/ipnlocal,cmd/tailscale: persist tailnet name in user profile	7 months ago
web_client.go	{client/web},{ipn/ipnlocal}: replace localapi debug-web-client endpoint	7 months ago
web_client_stub.go	ipn/ipnlocal: add mutex to webClient struct	8 months ago