mirror of
https://github.com/tailscale/tailscale.git
synced 2025-06-04 13:58:24 +00:00
9ebb5d4205
ProgramData has a permissive ACL. For us to safely store machine-wide state information, we must set a more restrictive ACL on our state directory. We set the ACL so that only talescaled's user (ie, LocalSystem) and the Administrators group may access our directory. We must include Administrators to ensure that logs continue to be easily accessible; omitting that group would force users to use special tools to log in interactively as LocalSystem, which is not ideal. (Note that the ACL we apply matches the ACL that was used for LocalSystem's AppData\Local). There are two cases where we need to reset perms: One is during migration from the old location to the new. The second case is for clean installations where we are creating the file store for the first time. Updates #2856 Signed-off-by: Aaron Klotz <aaron@tailscale.com>
187 lines
17 KiB
Plaintext
187 lines
17 KiB
Plaintext
tailscale.com/cmd/tailscale dependencies: (generated by github.com/tailscale/depaware)
|
|
|
|
W 💣 github.com/alexbrainman/sspi from github.com/alexbrainman/sspi/negotiate+
|
|
W github.com/alexbrainman/sspi/internal/common from github.com/alexbrainman/sspi/negotiate
|
|
W 💣 github.com/alexbrainman/sspi/negotiate from tailscale.com/net/tshttpproxy
|
|
github.com/kballard/go-shellquote from tailscale.com/cmd/tailscale/cli
|
|
💣 github.com/mitchellh/go-ps from tailscale.com/cmd/tailscale/cli+
|
|
github.com/peterbourgon/ff/v3 from github.com/peterbourgon/ff/v3/ffcli
|
|
github.com/peterbourgon/ff/v3/ffcli from tailscale.com/cmd/tailscale/cli
|
|
github.com/tailscale/goupnp from github.com/tailscale/goupnp/dcps/internetgateway2+
|
|
github.com/tailscale/goupnp/dcps/internetgateway2 from tailscale.com/net/portmapper
|
|
github.com/tailscale/goupnp/httpu from github.com/tailscale/goupnp+
|
|
github.com/tailscale/goupnp/scpd from github.com/tailscale/goupnp
|
|
github.com/tailscale/goupnp/soap from github.com/tailscale/goupnp+
|
|
github.com/tailscale/goupnp/ssdp from github.com/tailscale/goupnp
|
|
github.com/tcnksm/go-httpstat from tailscale.com/net/netcheck
|
|
github.com/toqueteos/webbrowser from tailscale.com/cmd/tailscale/cli
|
|
💣 go4.org/intern from inet.af/netaddr
|
|
💣 go4.org/mem from tailscale.com/derp+
|
|
go4.org/unsafe/assume-no-moving-gc from go4.org/intern
|
|
W 💣 golang.zx2c4.com/wireguard/windows/tunnel/winipcfg from tailscale.com/net/interfaces+
|
|
inet.af/netaddr from tailscale.com/cmd/tailscale/cli+
|
|
tailscale.com/atomicfile from tailscale.com/ipn+
|
|
tailscale.com/client/tailscale from tailscale.com/cmd/tailscale/cli+
|
|
tailscale.com/client/tailscale/apitype from tailscale.com/client/tailscale+
|
|
tailscale.com/cmd/tailscale/cli from tailscale.com/cmd/tailscale
|
|
tailscale.com/control/controlknobs from tailscale.com/net/portmapper
|
|
tailscale.com/derp from tailscale.com/derp/derphttp
|
|
tailscale.com/derp/derphttp from tailscale.com/net/netcheck
|
|
tailscale.com/disco from tailscale.com/derp
|
|
tailscale.com/hostinfo from tailscale.com/net/interfaces
|
|
tailscale.com/ipn from tailscale.com/cmd/tailscale/cli+
|
|
tailscale.com/ipn/ipnstate from tailscale.com/cmd/tailscale/cli+
|
|
tailscale.com/kube from tailscale.com/ipn
|
|
💣 tailscale.com/metrics from tailscale.com/derp
|
|
tailscale.com/net/dnscache from tailscale.com/derp/derphttp
|
|
tailscale.com/net/flowtrack from tailscale.com/wgengine/filter+
|
|
💣 tailscale.com/net/interfaces from tailscale.com/cmd/tailscale/cli+
|
|
tailscale.com/net/netcheck from tailscale.com/cmd/tailscale/cli
|
|
tailscale.com/net/netns from tailscale.com/derp/derphttp+
|
|
tailscale.com/net/packet from tailscale.com/wgengine/filter
|
|
tailscale.com/net/portmapper from tailscale.com/net/netcheck+
|
|
tailscale.com/net/stun from tailscale.com/net/netcheck
|
|
tailscale.com/net/tlsdial from tailscale.com/derp/derphttp
|
|
tailscale.com/net/tsaddr from tailscale.com/net/interfaces+
|
|
💣 tailscale.com/net/tshttpproxy from tailscale.com/derp/derphttp+
|
|
💣 tailscale.com/paths from tailscale.com/cmd/tailscale/cli+
|
|
tailscale.com/safesocket from tailscale.com/cmd/tailscale/cli+
|
|
💣 tailscale.com/syncs from tailscale.com/net/interfaces+
|
|
tailscale.com/tailcfg from tailscale.com/cmd/tailscale/cli+
|
|
W tailscale.com/tsconst from tailscale.com/net/interfaces
|
|
💣 tailscale.com/tstime/mono from tailscale.com/tstime/rate
|
|
tailscale.com/tstime/rate from tailscale.com/wgengine/filter
|
|
tailscale.com/types/dnstype from tailscale.com/tailcfg
|
|
tailscale.com/types/empty from tailscale.com/ipn
|
|
tailscale.com/types/ipproto from tailscale.com/net/flowtrack+
|
|
tailscale.com/types/key from tailscale.com/derp+
|
|
tailscale.com/types/logger from tailscale.com/cmd/tailscale/cli+
|
|
tailscale.com/types/netmap from tailscale.com/ipn
|
|
tailscale.com/types/opt from tailscale.com/net/netcheck+
|
|
tailscale.com/types/pad32 from tailscale.com/derp
|
|
tailscale.com/types/persist from tailscale.com/ipn
|
|
tailscale.com/types/preftype from tailscale.com/cmd/tailscale/cli+
|
|
tailscale.com/types/structs from tailscale.com/ipn+
|
|
tailscale.com/types/wgkey from tailscale.com/types/netmap+
|
|
tailscale.com/util/dnsname from tailscale.com/cmd/tailscale/cli+
|
|
W tailscale.com/util/endian from tailscale.com/net/netns
|
|
tailscale.com/util/groupmember from tailscale.com/cmd/tailscale/cli
|
|
tailscale.com/util/lineread from tailscale.com/net/interfaces+
|
|
tailscale.com/version from tailscale.com/cmd/tailscale/cli+
|
|
tailscale.com/version/distro from tailscale.com/cmd/tailscale/cli+
|
|
tailscale.com/wgengine/filter from tailscale.com/types/netmap
|
|
golang.org/x/crypto/blake2b from golang.org/x/crypto/nacl/box
|
|
golang.org/x/crypto/chacha20 from golang.org/x/crypto/chacha20poly1305
|
|
golang.org/x/crypto/chacha20poly1305 from crypto/tls+
|
|
golang.org/x/crypto/cryptobyte from crypto/ecdsa+
|
|
golang.org/x/crypto/cryptobyte/asn1 from crypto/ecdsa+
|
|
golang.org/x/crypto/curve25519 from crypto/tls+
|
|
golang.org/x/crypto/hkdf from crypto/tls
|
|
golang.org/x/crypto/nacl/box from tailscale.com/derp+
|
|
golang.org/x/crypto/nacl/secretbox from golang.org/x/crypto/nacl/box
|
|
golang.org/x/crypto/poly1305 from golang.org/x/crypto/chacha20poly1305+
|
|
golang.org/x/crypto/salsa20/salsa from golang.org/x/crypto/nacl/box+
|
|
golang.org/x/net/dns/dnsmessage from net
|
|
golang.org/x/net/http/httpguts from net/http+
|
|
golang.org/x/net/http/httpproxy from net/http
|
|
golang.org/x/net/http2/hpack from net/http
|
|
golang.org/x/net/idna from golang.org/x/net/http/httpguts+
|
|
golang.org/x/net/proxy from tailscale.com/net/netns
|
|
D golang.org/x/net/route from net+
|
|
golang.org/x/sync/errgroup from tailscale.com/derp+
|
|
golang.org/x/sync/singleflight from tailscale.com/net/dnscache
|
|
golang.org/x/sys/cpu from golang.org/x/crypto/blake2b+
|
|
LD golang.org/x/sys/unix from tailscale.com/net/netns+
|
|
W golang.org/x/sys/windows from golang.org/x/sys/windows/registry+
|
|
W golang.org/x/sys/windows/registry from golang.zx2c4.com/wireguard/windows/tunnel/winipcfg
|
|
golang.org/x/text/secure/bidirule from golang.org/x/net/idna
|
|
golang.org/x/text/transform from golang.org/x/text/secure/bidirule+
|
|
golang.org/x/text/unicode/bidi from golang.org/x/net/idna+
|
|
golang.org/x/text/unicode/norm from golang.org/x/net/idna
|
|
golang.org/x/time/rate from tailscale.com/cmd/tailscale/cli+
|
|
bufio from compress/flate+
|
|
bytes from bufio+
|
|
compress/flate from compress/gzip
|
|
compress/gzip from net/http
|
|
container/list from crypto/tls+
|
|
context from crypto/tls+
|
|
crypto from crypto/ecdsa+
|
|
crypto/aes from crypto/ecdsa+
|
|
crypto/cipher from crypto/aes+
|
|
crypto/des from crypto/tls+
|
|
crypto/dsa from crypto/x509
|
|
crypto/ecdsa from crypto/tls+
|
|
crypto/ed25519 from crypto/tls+
|
|
crypto/elliptic from crypto/ecdsa+
|
|
crypto/hmac from crypto/tls+
|
|
crypto/md5 from crypto/tls+
|
|
crypto/rand from crypto/ed25519+
|
|
crypto/rc4 from crypto/tls
|
|
crypto/rsa from crypto/tls+
|
|
crypto/sha1 from crypto/tls+
|
|
crypto/sha256 from crypto/tls+
|
|
crypto/sha512 from crypto/ecdsa+
|
|
crypto/subtle from crypto/aes+
|
|
crypto/tls from github.com/tcnksm/go-httpstat+
|
|
crypto/x509 from crypto/tls+
|
|
crypto/x509/pkix from crypto/x509+
|
|
embed from tailscale.com/cmd/tailscale/cli
|
|
encoding from encoding/json+
|
|
encoding/asn1 from crypto/x509+
|
|
encoding/base64 from encoding/json+
|
|
encoding/binary from compress/gzip+
|
|
encoding/hex from crypto/x509+
|
|
encoding/json from expvar+
|
|
encoding/pem from crypto/tls+
|
|
encoding/xml from tailscale.com/cmd/tailscale/cli+
|
|
errors from bufio+
|
|
expvar from tailscale.com/derp+
|
|
flag from github.com/peterbourgon/ff/v3+
|
|
fmt from compress/flate+
|
|
hash from crypto+
|
|
hash/crc32 from compress/gzip+
|
|
hash/maphash from go4.org/mem
|
|
html from tailscale.com/ipn/ipnstate+
|
|
html/template from tailscale.com/cmd/tailscale/cli
|
|
io from bufio+
|
|
io/fs from crypto/rand+
|
|
io/ioutil from golang.org/x/sys/cpu+
|
|
log from expvar+
|
|
math from compress/flate+
|
|
math/big from crypto/dsa+
|
|
math/bits from compress/flate+
|
|
math/rand from math/big+
|
|
mime from mime/multipart+
|
|
mime/multipart from net/http
|
|
mime/quotedprintable from mime/multipart
|
|
net from crypto/tls+
|
|
net/http from expvar+
|
|
net/http/cgi from tailscale.com/cmd/tailscale/cli
|
|
net/http/httptrace from github.com/tcnksm/go-httpstat+
|
|
net/http/internal from net/http
|
|
net/textproto from golang.org/x/net/http/httpguts+
|
|
net/url from crypto/x509+
|
|
os from crypto/rand+
|
|
os/exec from github.com/toqueteos/webbrowser+
|
|
os/signal from tailscale.com/cmd/tailscale/cli
|
|
os/user from tailscale.com/util/groupmember
|
|
path from html/template+
|
|
path/filepath from crypto/x509+
|
|
reflect from crypto/x509+
|
|
regexp from github.com/tailscale/goupnp/httpu+
|
|
regexp/syntax from regexp
|
|
runtime/debug from golang.org/x/sync/singleflight
|
|
sort from compress/flate+
|
|
strconv from compress/flate+
|
|
strings from bufio+
|
|
sync from compress/flate+
|
|
sync/atomic from context+
|
|
syscall from crypto/rand+
|
|
text/tabwriter from github.com/peterbourgon/ff/v3/ffcli+
|
|
text/template from html/template
|
|
text/template/parse from html/template+
|
|
time from compress/gzip+
|
|
unicode from bytes+
|
|
unicode/utf16 from encoding/asn1+
|
|
unicode/utf8 from bufio+
|