tailscale
forked from tailscale/tailscale
Star 0
Fork 0
Watch

Commits on master

James Tucker
hostinfo,ssh/tailssh: don't leak systemd service env to child processes
committed
James Tucker
ssh/tailssh: keep sessions when a prompt-free rule expires
committed
François Marier
tstest/natlab: add basic SSDP and UPnP support (#21823)
committed
Alex Valiushko
wgengine/magicsock: implement conn.MultiSocketBind (#21971)
committed
Claus Lensbøl
cmd/natlab-test-matrix,tstest/natlab/vmtest: add test matrix tool (#21818)
committed
Sam Jean
ipn/ipnlocal: check the tailscaled socket on every serve unix dial
committed
kari-ts
ipn/ipnlocal: reset alwayson override before reconciling prefs (#21998)
committed
Michael Ben-Ami
feature/conn25,net/dns{,/resolver}: thread PeerAPI DoH metadata in DNS response when DNS request goes to PeerAPI DoH
committed
BeckyPauley
cmd/k8s-operator/e2e: add 4via6 egress tests (#21854)
committed
Brendan Creane
net/routemanager: keep the coarse CGNAT and ULA routes when a peer advertises them (#21901)
committed
Samuel Blais-Dowdy
cmd/k8s-operator: give kube-apiserver ProxyGroups the configured log level (#21888)
committed
Francois Marier
tstest/natlab/vnet: fix TCPConn leak
committed
Francois Marier
ssh/tailssh: parse UIDs consistently in isRootUser()
committed
Sam Jean
ipn/ipnlocal: refuse serving TCP to the tailscaled socket (#21966)
committed
Pawel Rutkowski
derp/derphttp: bound response body read on non-101 upgrade response (#21980)
committed
James Tucker
ssh/tailssh: release reverse-forward cancellation callbacks
committed
Mazdak Nasab
feature/conn25: add test coverage for DNS optional sections (#21782)
committed
Percy Wegmann
ssh/tailssh: set $LOGNAME to same value as $USER in incubator
committed
James Tucker
ssh/tailssh: give delegated action fetches one timeout owner
committed
James Tucker
ssh/tailssh: name the monitor for its connection-wide role
committed
James Tucker
ssh/tailssh: clarify lifecycle and protocol comments
committed
James Tucker
ssh/tailssh: register connections atomically with shutdown
committed
Mario Minardi
client,tool: bump node to latest 22.x
committed
James Tucker
ssh/tailssh: dial TCP forwards as the bound user
committed
James Tucker
ssh/tailssh: retain the latest session window size
committed
James Tucker
ssh/tailssh: relay Unix forward payloads as the bound user
committed
Claus Lensbøl
wgengine/magicsock: ensure discoKey nodeKey match (#21956)
committed
James Tucker
ssh/tailssh: enforce recording failure before notifying control
committed
Alex Valiushko
wgengine/magicsock: apply peer MTU sockopts through net/sockopts (#21855)
committed
James Tucker
ssh/tailssh: initialize username hint exclusions
committed
James Tucker
ssh/tailssh: enforce SSH policy at the connection level
committed
James Tucker
go.mod: bump gliderssh for window resize fix
committed
James Tucker
ssh/tailssh: launch sessions via the monitor
committed
James Tucker
ssh/tailssh: route SSH forwarding through the privileged monitor
committed
James Tucker
ssh/tailssh: add user-credential forwarding children and monitor dial/listen ops
committed
James Tucker
ssh/tailssh: add monitor RPC codec and SCM_RIGHTS fd passing
committed
James Tucker
go.mod: update gliderssh for resource exhaustion fixes
committed
James Tucker
tsnet: authorize ListenSSH peers, fix PTY emulation and session queue bound
committed
James Tucker
ssh/tailssh: drain the sftp test helper's stderr copier
committed
James Tucker
go.mod: update gliderssh to remove data race on timeouts
committed
Mike Jensen
ipn/ipnlocal: fix serve app caps leaking across mounts (#21931)
committed
James Tucker
ssh/tailssh: record sftp sessions and honor recording failure policy
committed
Mike Jensen
ssh/tailssh: unify defaultPathForUser to use isRootUser (#21928)
committed
James Tucker
ssh/tailssh: fix off-by-one and clamp c2n SSH username hint cap
committed
James Tucker
ssh/tailssh: validate accepted env values, deny GLIBC_TUNABLES, cap names
committed
James Tucker
ssh/tailssh: refuse direct-exec fallback for non-root users as root
committed
James Tucker
ssh/tailssh: hand the agent forwarding dir to the user, remove it on session end
committed
James Tucker
ssh/tailssh: pin rejection-banner content to policy-derived facts
committed
James Tucker
ssh/tailssh: write private host keys with 0600 permissions
committed
James Tucker
ssh/tailssh: treat numerically-zero uids as root in isRootUser
committed
James Tucker
util/osuser: validate 'id' input, reject corrupt getent passwd output
committed
James Tucker
ssh/tailssh: extend dangerous env var denylist, re-check child-side
committed
James Tucker
ssh/tailssh: make acceptEnv pattern matching linear time
committed
James Tucker
ssh/tailssh: record the raw client command in session recordings
committed
Brad Fitzpatrick
drive/driveimpl/compositedav: don't run ttlcache cleanup goroutines
committed
James Tucker
net/netmon,net/netns: cache Windows default interface indices
committed
Alex Chan
util/set: provide a size hint when calling Set.Of
committed
Alex Chan
types/ipproto: fix a typo in a doc comment
committed
kari-ts
ipn, ipn/local: expose hidden device gui gui_visibility (#21822)
committed
Brad Fitzpatrick
words: add a missing scale
committed