tailscale/wgengine/netstack
Andrea Gottardo e5f67f90a2
xcode: allow ICMP ping relay on macOS + iOS platforms (#12048)
Fixes tailscale/tailscale#10393
Fixes tailscale/corp#15412
Fixes tailscale/corp#19808

On Apple platforms, exit nodes and subnet routers have been unable to relay pings from Tailscale devices to non-Tailscale devices due to sandbox restrictions imposed on our network extensions by Apple. The sandbox prevented the code in netstack.go from spawning the `ping` process which we were using.

Replace that exec call with logic to send an ICMP echo request directly, which appears to work in userspace, and not trigger a sandbox violation in the syslog.

Signed-off-by: Andrea Gottardo <andrea@gottardo.me>
2024-05-16 11:57:57 -07:00
..
netstack_linux.go all: update copyright and license headers 2023-01-27 15:36:29 -08:00
netstack_test.go wgengine/netstack: handle 4via6 routes that are advertised by the same node 2024-05-08 17:36:17 -06:00
netstack_userping_apple.go xcode: allow ICMP ping relay on macOS + iOS platforms (#12048) 2024-05-16 11:57:57 -07:00
netstack_userping.go xcode: allow ICMP ping relay on macOS + iOS platforms (#12048) 2024-05-16 11:57:57 -07:00
netstack.go xcode: allow ICMP ping relay on macOS + iOS platforms (#12048) 2024-05-16 11:57:57 -07:00