safesocket: add isMacSysExt Check (#15192)

fixes tailscale/corp#26806

IsMacSysApp is not returning the correct answer... It looks like the
rest of the code base uses isMacSysExt (when what they really want
to know is isMacSysApp).   To fix the immediate issue (localAPI is broken
entirely in corp), we'll add this check to safesocket which lines up with
the other usages, despite the confusing naming.

Signed-off-by: Jonathan Nobels <jonathan@tailscale.com>
This commit is contained in:
Jonathan Nobels
2025-03-03 18:28:26 -05:00
committed by GitHub
parent 5449aba94c
commit 16a920b96e

View File

@@ -44,7 +44,7 @@ type safesocketDarwin struct {
var ssd = safesocketDarwin{ var ssd = safesocketDarwin{
isMacSysExt: version.IsMacSysExt, isMacSysExt: version.IsMacSysExt,
isMacGUIApp: func() bool { return version.IsMacAppStore() || version.IsMacSysApp() }, isMacGUIApp: func() bool { return version.IsMacAppStore() || version.IsMacSysApp() || version.IsMacSysExt() },
checkConn: true, checkConn: true,
sharedDir: "/Library/Tailscale", sharedDir: "/Library/Tailscale",
} }