TheArchive/tailscale
1
0
Fork 0
mirror of https://github.com/tailscale/tailscale.git synced 2025-06-14 12:08:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

posture: propagate serial number from MDM on Android

Browse Source 
Updates #16010

Signed-off-by: Anton Tolchanov <anton@tailscale.com>
This commit is contained in:
Anton Tolchanov 2025-05-30 13:03:46 +01:00 committed by Anton Tolchanov
parent 8a3afa5963
commit cc988596a2
3 changed files with 7 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
posture/serialnumber_stub.go
View File

@ -1,13 +1,12 @@
// Copyright (c) Tailscale Inc & AUTHORS // Copyright (c) Tailscale Inc & AUTHORS
// SPDX-License-Identifier: BSD-3-Clause // SPDX-License-Identifier: BSD-3-Clause
// android: not implemented
// js: not implemented // js: not implemented
// plan9: not implemented // plan9: not implemented
// solaris: currently unsupported by go-smbios: // solaris: currently unsupported by go-smbios:
// https://github.com/digitalocean/go-smbios/pull/21 // https://github.com/digitalocean/go-smbios/pull/21
//go:build android || solaris || plan9 || js || wasm || tamago || aix || (darwin && !cgo && !ios) //go:build solaris || plan9 || js || wasm || tamago || aix || (darwin && !cgo && !ios)
package posture package posture

6
posture/serialnumber_ios.go → posture/serialnumber_syspolicy.go
View File

@ -1,6 +1,8 @@
// Copyright (c) Tailscale Inc & AUTHORS // Copyright (c) Tailscale Inc & AUTHORS
// SPDX-License-Identifier: BSD-3-Clause // SPDX-License-Identifier: BSD-3-Clause
//go:build android || ios
package posture package posture
import ( import (
@ -10,9 +12,9 @@ import (
"tailscale.com/util/syspolicy" "tailscale.com/util/syspolicy"
) )
// GetSerialNumbers returns the serial number of the iOS/tvOS device as reported by an // GetSerialNumbers returns the serial number of the device as reported by an
// MDM solution. It requires configuration via the DeviceSerialNumber system policy. // MDM solution. It requires configuration via the DeviceSerialNumber system policy.
// This is the only way to gather serial numbers on iOS and tvOS. // This is the only way to gather serial numbers on iOS, tvOS and Android.
func GetSerialNumbers(_ logger.Logf) ([]string, error) { func GetSerialNumbers(_ logger.Logf) ([]string, error) {
s, err := syspolicy.GetString(syspolicy.DeviceSerialNumber, "") s, err := syspolicy.GetString(syspolicy.DeviceSerialNumber, "")
if err != nil { if err != nil {

4
util/syspolicy/policy_keys.go
View File

@ -126,8 +126,8 @@ const (
// The default is "user-decides" unless otherwise stated. // The default is "user-decides" unless otherwise stated.
PostureChecking Key = "PostureChecking" PostureChecking Key = "PostureChecking"
// DeviceSerialNumber is the serial number of the device that is running Tailscale. // DeviceSerialNumber is the serial number of the device that is running Tailscale.
// This is used on iOS/tvOS to allow IT administrators to manually give us a serial number via MDM. // This is used on Android, iOS and tvOS to allow IT administrators to manually give us a serial number via MDM.
// We are unable to programmatically get the serial number from IOKit due to sandboxing restrictions. // We are unable to programmatically get the serial number on mobile due to sandboxing restrictions.
DeviceSerialNumber Key = "DeviceSerialNumber" DeviceSerialNumber Key = "DeviceSerialNumber"
// ManagedByOrganizationName indicates the name of the organization managing the Tailscale // ManagedByOrganizationName indicates the name of the organization managing the Tailscale