ssh/tailssh · tailscale · Tangled

forked from tailscale/tailscale

tailscale ssh tailssh

1 folder · 65 files

James Tucker · hostinfo,ssh/tailssh: don't leak systemd service env to child processes · 2w ago

ssh/tailssh: speed up SSH integration tests

accept_env_test.go

ssh/tailssh: validate accepted env values, deny GLIBC_TUNABLES, cap names

ssh/tailssh: validate accepted env values, deny GLIBC_TUNABLES, cap names

auditd_linux_test.go

all: remove AUTHORS file and references to it

auditd_linux.go

all: remove AUTHORS file and references to it

ssh/tailssh: initialize username hint exclusions

ssh/tailssh: initialize username hint exclusions

conn_lifecycle_test.go

ssh/tailssh: register connections atomically with shutdown

connmonitor_plan9.go

ssh/tailssh: name the monitor for its connection-wide role

ssh/tailssh: name the monitor for its connection-wide role

delegate_test.go

ssh/tailssh: give delegated action fetches one timeout owner

ssh/tailssh: name the monitor for its connection-wide role

fwdchild_linux_test.go

ssh/tailssh: launch sessions via the monitor

fwdchild_other_test.go

ssh/tailssh: launch sessions via the monitor

fwdchild_test.go

ssh/tailssh: dial TCP forwards as the bound user

ssh/tailssh: clarify lifecycle and protocol comments

fwdmonitor_linux_test.go

ssh/tailssh: relay Unix forward payloads as the bound user

fwdmonitor_test.go

ssh/tailssh: release reverse-forward cancellation callbacks

ssh/tailssh: release reverse-forward cancellation callbacks

ssh/tailssh: name the monitor for its connection-wide role

fwdrelay_linux_test.go

ssh/tailssh: dial TCP forwards as the bound user

fwdrelay_test.go

ssh/tailssh: relay Unix forward payloads as the bound user

fwdtcp_linux_test.go

ssh/tailssh: dial TCP forwards as the bound user

fwdtcp_listener_test.go

ssh/tailssh: release reverse-forward cancellation callbacks

ssh/tailssh: name the monitor for its connection-wide role

hostkeys_test.go

ssh/tailssh: write private host keys with 0600 permissions

ssh/tailssh: write private host keys with 0600 permissions

incubator_linux.go

all: remove AUTHORS file and references to it

incubator_plan9.go

ssh/tailssh: launch sessions via the monitor

incubator_test.go

ssh/tailssh: set $LOGNAME to same value as $USER in incubator

hostinfo,ssh/tailssh: don't leak systemd service env to child processes

ssh/tailssh: retain the latest session window size

tsnet: authorize ListenSSH peers, fix PTY emulation and session queue bound

localstate_test.go

ssh/tailssh: launch sessions via the monitor

monitor_client.go

hostinfo,ssh/tailssh: don't leak systemd service env to child processes

monitor_env_test.go

hostinfo,ssh/tailssh: don't leak systemd service env to child processes

monitor_lifecycle_test.go

ssh/tailssh: name the monitor for its connection-wide role

monitor_linux.go

ssh/tailssh: add user-credential forwarding children and monitor dial/listen ops

monitor_other.go

ssh/tailssh: add user-credential forwarding children and monitor dial/listen ops

monitor_rpc_linux_test.go

ssh/tailssh: launch sessions via the monitor

monitor_rpc_test.go

ssh/tailssh: dial TCP forwards as the bound user

ssh/tailssh: clarify lifecycle and protocol comments

monitor_test.go

ssh/tailssh: launch sessions via the monitor

monitor_watchdog_linux_test.go

ssh/tailssh: launch sessions via the monitor

hostinfo,ssh/tailssh: don't leak systemd service env to child processes

policy_recheck_test.go

ssh/tailssh: keep sessions when a prompt-free rule expires

tstest: add RequireRoot helper

process_unix_test.go

ssh/tailssh: route SSH forwarding through the privileged monitor

process_unix.go

ssh/tailssh: enforce SSH policy at the connection level

ssh/tailssh: retain the latest session window size

sessmonitor_test.go

ssh/tailssh: name the monitor for its connection-wide role

ssh/tailssh: name the monitor for its connection-wide role

ssh/tailssh: split the OS-specific parts of the server into their own files

tailssh_exitcodes_test.go

ssh/tailssh: test exit-status frame ordering and stderr drain

tailssh_frameorder_test.go

ssh/tailssh: test exit-status frame ordering and stderr drain

tailssh_integration_exitcodes_test.go

ssh/tailssh: route SSH forwarding through the privileged monitor

tailssh_integration_test.go

ssh/tailssh: route SSH forwarding through the privileged monitor

tailssh_policy_sftp_test.go

ssh/tailssh: enforce SSH policy at the connection level

tailssh_policy_test.go

ssh/tailssh: keep sessions when a prompt-free rule expires

tailssh_recording_failure_test.go

ssh/tailssh: enforce recording failure before notifying control

tailssh_recording_notify_test.go

ssh/tailssh: enforce recording failure before notifying control

tailssh_test.go

ssh/tailssh: parse UIDs consistently in isRootUser()

ssh/tailssh: keep sessions when a prompt-free rule expires

user_lookup_test.go

ssh/tailssh: enforce SSH policy at the connection level

ssh/tailssh: parse UIDs consistently in isRootUser()

ssh/tailssh: enforce SSH policy at the connection level