Brad Fitzpatrick 5611f290eb ipn, ipnserver: only require sudo on Linux for mutable CLI actions ... This partially reverts d6e9fb1df0, which modified the permissions on the tailscaled Unix socket and thus required "sudo tailscale" even for "tailscale status". Instead, open the permissions back up (on Linux only) but have the server look at the peer creds and only permit read-only actions unless you're root. In the future we'll also have a group that can do mutable actions. On OpenBSD and FreeBSD, the permissions on the socket remain locked down to 0600 from d6e9fb1df0. Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>		2021-01-15 10:13:00 -08:00
..
conn_linux.go	ipn, ipnserver: only require sudo on Linux for mutable CLI actions	2021-01-15 10:13:00 -08:00
conn_no_ucred.go	ipn, ipnserver: only require sudo on Linux for mutable CLI actions	2021-01-15 10:13:00 -08:00
server_test.go	cmd/tailscaled, wgengine/netstack: add start of gvisor userspace netstack work	2021-01-11 09:31:14 -08:00
server.go	ipn, ipnserver: only require sudo on Linux for mutable CLI actions	2021-01-15 10:13:00 -08:00