mirror of
https://github.com/tailscale/tailscale.git
synced 2024-11-29 13:05:46 +00:00
9ebb5d4205
ProgramData has a permissive ACL. For us to safely store machine-wide state information, we must set a more restrictive ACL on our state directory. We set the ACL so that only talescaled's user (ie, LocalSystem) and the Administrators group may access our directory. We must include Administrators to ensure that logs continue to be easily accessible; omitting that group would force users to use special tools to log in interactively as LocalSystem, which is not ideal. (Note that the ACL we apply matches the ACL that was used for LocalSystem's AppData\Local). There are two cases where we need to reset perms: One is during migration from the old location to the new. The second case is for clean installations where we are creating the file store for the first time. Updates #2856 Signed-off-by: Aaron Klotz <aaron@tailscale.com>
307 lines
30 KiB
Plaintext
307 lines
30 KiB
Plaintext
tailscale.com/cmd/tailscaled dependencies: (generated by github.com/tailscale/depaware)
|
|
|
|
W 💣 github.com/alexbrainman/sspi from github.com/alexbrainman/sspi/negotiate+
|
|
W github.com/alexbrainman/sspi/internal/common from github.com/alexbrainman/sspi/negotiate
|
|
W 💣 github.com/alexbrainman/sspi/negotiate from tailscale.com/net/tshttpproxy
|
|
L github.com/coreos/go-iptables/iptables from tailscale.com/wgengine/router
|
|
github.com/go-multierror/multierror from tailscale.com/wgengine/router+
|
|
W 💣 github.com/go-ole/go-ole from github.com/go-ole/go-ole/oleutil+
|
|
W 💣 github.com/go-ole/go-ole/oleutil from tailscale.com/wgengine/winnet
|
|
L 💣 github.com/godbus/dbus/v5 from tailscale.com/net/dns
|
|
github.com/golang/snappy from github.com/klauspost/compress/zstd
|
|
github.com/google/btree from inet.af/netstack/tcpip/header+
|
|
L github.com/insomniacslk/dhcp/dhcpv4 from tailscale.com/net/tstun
|
|
L github.com/insomniacslk/dhcp/iana from github.com/insomniacslk/dhcp/dhcpv4
|
|
L github.com/insomniacslk/dhcp/interfaces from github.com/insomniacslk/dhcp/dhcpv4
|
|
L github.com/insomniacslk/dhcp/rfc1035label from github.com/insomniacslk/dhcp/dhcpv4
|
|
L github.com/josharian/native from github.com/mdlayher/netlink+
|
|
L 💣 github.com/jsimonetti/rtnetlink from tailscale.com/wgengine/monitor
|
|
L github.com/jsimonetti/rtnetlink/internal/unix from github.com/jsimonetti/rtnetlink
|
|
github.com/klauspost/compress/fse from github.com/klauspost/compress/huff0
|
|
github.com/klauspost/compress/huff0 from github.com/klauspost/compress/zstd
|
|
github.com/klauspost/compress/zstd from tailscale.com/smallzstd
|
|
github.com/klauspost/compress/zstd/internal/xxhash from github.com/klauspost/compress/zstd
|
|
L 💣 github.com/mdlayher/netlink from tailscale.com/wgengine/monitor+
|
|
L 💣 github.com/mdlayher/netlink/nlenc from github.com/mdlayher/netlink+
|
|
L github.com/mdlayher/sdnotify from tailscale.com/util/systemd
|
|
L 💣 github.com/mdlayher/socket from github.com/mdlayher/netlink
|
|
💣 github.com/mitchellh/go-ps from tailscale.com/safesocket
|
|
W github.com/pkg/errors from github.com/tailscale/certstore
|
|
W 💣 github.com/tailscale/certstore from tailscale.com/control/controlclient
|
|
github.com/tailscale/goupnp from github.com/tailscale/goupnp/dcps/internetgateway2+
|
|
github.com/tailscale/goupnp/dcps/internetgateway2 from tailscale.com/net/portmapper
|
|
github.com/tailscale/goupnp/httpu from github.com/tailscale/goupnp+
|
|
github.com/tailscale/goupnp/scpd from github.com/tailscale/goupnp
|
|
github.com/tailscale/goupnp/soap from github.com/tailscale/goupnp+
|
|
github.com/tailscale/goupnp/ssdp from github.com/tailscale/goupnp
|
|
github.com/tcnksm/go-httpstat from tailscale.com/net/netcheck
|
|
L github.com/u-root/uio/rand from github.com/insomniacslk/dhcp/dhcpv4
|
|
L github.com/u-root/uio/ubinary from github.com/u-root/uio/uio
|
|
L github.com/u-root/uio/uio from github.com/insomniacslk/dhcp/dhcpv4+
|
|
💣 go4.org/intern from inet.af/netaddr
|
|
💣 go4.org/mem from tailscale.com/derp+
|
|
go4.org/unsafe/assume-no-moving-gc from go4.org/intern
|
|
💣 golang.zx2c4.com/wireguard/conn from golang.zx2c4.com/wireguard/device+
|
|
W 💣 golang.zx2c4.com/wireguard/conn/winrio from golang.zx2c4.com/wireguard/conn
|
|
💣 golang.zx2c4.com/wireguard/device from tailscale.com/net/tstun+
|
|
💣 golang.zx2c4.com/wireguard/ipc from golang.zx2c4.com/wireguard/device
|
|
W 💣 golang.zx2c4.com/wireguard/ipc/winpipe from golang.zx2c4.com/wireguard/ipc
|
|
golang.zx2c4.com/wireguard/ratelimiter from golang.zx2c4.com/wireguard/device
|
|
golang.zx2c4.com/wireguard/replay from golang.zx2c4.com/wireguard/device
|
|
golang.zx2c4.com/wireguard/rwcancel from golang.zx2c4.com/wireguard/device+
|
|
golang.zx2c4.com/wireguard/tai64n from golang.zx2c4.com/wireguard/device
|
|
💣 golang.zx2c4.com/wireguard/tun from golang.zx2c4.com/wireguard/device+
|
|
W 💣 golang.zx2c4.com/wireguard/tun/wintun from golang.zx2c4.com/wireguard/tun+
|
|
W 💣 golang.zx2c4.com/wireguard/windows/tunnel/winipcfg from tailscale.com/net/interfaces+
|
|
inet.af/netaddr from tailscale.com/control/controlclient+
|
|
inet.af/netstack/atomicbitops from inet.af/netstack/tcpip+
|
|
💣 inet.af/netstack/buffer from inet.af/netstack/tcpip/stack
|
|
💣 inet.af/netstack/gohacks from inet.af/netstack/state/wire+
|
|
inet.af/netstack/linewriter from inet.af/netstack/log
|
|
inet.af/netstack/log from inet.af/netstack/state+
|
|
inet.af/netstack/rand from inet.af/netstack/tcpip/network/hash+
|
|
💣 inet.af/netstack/sleep from inet.af/netstack/tcpip/transport/tcp
|
|
💣 inet.af/netstack/state from inet.af/netstack/tcpip+
|
|
inet.af/netstack/state/wire from inet.af/netstack/state
|
|
💣 inet.af/netstack/sync from inet.af/netstack/linewriter+
|
|
inet.af/netstack/tcpip from inet.af/netstack/tcpip/adapters/gonet+
|
|
inet.af/netstack/tcpip/adapters/gonet from tailscale.com/wgengine/netstack
|
|
💣 inet.af/netstack/tcpip/buffer from inet.af/netstack/tcpip/adapters/gonet+
|
|
inet.af/netstack/tcpip/hash/jenkins from inet.af/netstack/tcpip/stack+
|
|
inet.af/netstack/tcpip/header from inet.af/netstack/tcpip/header/parse+
|
|
inet.af/netstack/tcpip/header/parse from inet.af/netstack/tcpip/network/ipv4+
|
|
inet.af/netstack/tcpip/link/channel from tailscale.com/wgengine/netstack
|
|
inet.af/netstack/tcpip/network/hash from inet.af/netstack/tcpip/network/ipv4+
|
|
inet.af/netstack/tcpip/network/internal/fragmentation from inet.af/netstack/tcpip/network/ipv4+
|
|
inet.af/netstack/tcpip/network/internal/ip from inet.af/netstack/tcpip/network/ipv4+
|
|
inet.af/netstack/tcpip/network/ipv4 from tailscale.com/wgengine/netstack+
|
|
inet.af/netstack/tcpip/network/ipv6 from tailscale.com/wgengine/netstack
|
|
inet.af/netstack/tcpip/ports from inet.af/netstack/tcpip/stack+
|
|
inet.af/netstack/tcpip/seqnum from inet.af/netstack/tcpip/header+
|
|
💣 inet.af/netstack/tcpip/stack from inet.af/netstack/tcpip/adapters/gonet+
|
|
inet.af/netstack/tcpip/transport/icmp from tailscale.com/wgengine/netstack
|
|
inet.af/netstack/tcpip/transport/packet from inet.af/netstack/tcpip/transport/raw
|
|
inet.af/netstack/tcpip/transport/raw from inet.af/netstack/tcpip/transport/icmp+
|
|
💣 inet.af/netstack/tcpip/transport/tcp from inet.af/netstack/tcpip/adapters/gonet+
|
|
inet.af/netstack/tcpip/transport/tcpconntrack from inet.af/netstack/tcpip/stack
|
|
inet.af/netstack/tcpip/transport/udp from inet.af/netstack/tcpip/adapters/gonet+
|
|
inet.af/netstack/waiter from inet.af/netstack/tcpip+
|
|
inet.af/peercred from tailscale.com/ipn/ipnserver
|
|
W 💣 inet.af/wf from tailscale.com/wf
|
|
tailscale.com/atomicfile from tailscale.com/ipn+
|
|
LD tailscale.com/chirp from tailscale.com/cmd/tailscaled
|
|
tailscale.com/client/tailscale from tailscale.com/derp
|
|
tailscale.com/client/tailscale/apitype from tailscale.com/ipn/ipnlocal+
|
|
tailscale.com/control/controlclient from tailscale.com/ipn/ipnlocal+
|
|
tailscale.com/control/controlknobs from tailscale.com/control/controlclient+
|
|
tailscale.com/derp from tailscale.com/derp/derphttp+
|
|
tailscale.com/derp/derphttp from tailscale.com/net/netcheck+
|
|
tailscale.com/disco from tailscale.com/derp+
|
|
tailscale.com/health from tailscale.com/control/controlclient+
|
|
tailscale.com/hostinfo from tailscale.com/control/controlclient+
|
|
tailscale.com/ipn from tailscale.com/ipn/ipnserver+
|
|
tailscale.com/ipn/ipnlocal from tailscale.com/ipn/ipnserver+
|
|
tailscale.com/ipn/ipnserver from tailscale.com/cmd/tailscaled
|
|
tailscale.com/ipn/ipnstate from tailscale.com/ipn+
|
|
tailscale.com/ipn/localapi from tailscale.com/ipn/ipnserver
|
|
tailscale.com/ipn/policy from tailscale.com/ipn/ipnlocal
|
|
tailscale.com/kube from tailscale.com/ipn
|
|
tailscale.com/log/filelogger from tailscale.com/ipn/ipnserver
|
|
tailscale.com/log/logheap from tailscale.com/control/controlclient
|
|
tailscale.com/logpolicy from tailscale.com/cmd/tailscaled
|
|
tailscale.com/logtail from tailscale.com/logpolicy
|
|
tailscale.com/logtail/backoff from tailscale.com/control/controlclient+
|
|
tailscale.com/logtail/filch from tailscale.com/logpolicy
|
|
💣 tailscale.com/metrics from tailscale.com/derp
|
|
tailscale.com/net/dns from tailscale.com/ipn/ipnlocal+
|
|
tailscale.com/net/dns/resolver from tailscale.com/wgengine+
|
|
tailscale.com/net/dnscache from tailscale.com/control/controlclient+
|
|
tailscale.com/net/dnsfallback from tailscale.com/control/controlclient
|
|
tailscale.com/net/flowtrack from tailscale.com/wgengine/filter+
|
|
💣 tailscale.com/net/interfaces from tailscale.com/cmd/tailscaled+
|
|
tailscale.com/net/netcheck from tailscale.com/wgengine/magicsock
|
|
tailscale.com/net/netns from tailscale.com/control/controlclient+
|
|
💣 tailscale.com/net/netstat from tailscale.com/ipn/ipnserver
|
|
tailscale.com/net/packet from tailscale.com/wgengine+
|
|
tailscale.com/net/portmapper from tailscale.com/net/netcheck+
|
|
tailscale.com/net/socks5 from tailscale.com/net/socks5/tssocks
|
|
tailscale.com/net/socks5/tssocks from tailscale.com/cmd/tailscaled
|
|
tailscale.com/net/stun from tailscale.com/net/netcheck+
|
|
tailscale.com/net/tlsdial from tailscale.com/control/controlclient+
|
|
tailscale.com/net/tsaddr from tailscale.com/ipn/ipnlocal+
|
|
💣 tailscale.com/net/tshttpproxy from tailscale.com/control/controlclient+
|
|
tailscale.com/net/tstun from tailscale.com/cmd/tailscaled+
|
|
💣 tailscale.com/paths from tailscale.com/cmd/tailscaled+
|
|
tailscale.com/portlist from tailscale.com/ipn/ipnlocal
|
|
tailscale.com/safesocket from tailscale.com/ipn/ipnserver+
|
|
tailscale.com/smallzstd from tailscale.com/ipn/ipnserver+
|
|
💣 tailscale.com/syncs from tailscale.com/net/interfaces+
|
|
tailscale.com/tailcfg from tailscale.com/control/controlclient+
|
|
W tailscale.com/tsconst from tailscale.com/net/interfaces
|
|
tailscale.com/tstime from tailscale.com/wgengine/magicsock
|
|
💣 tailscale.com/tstime/mono from tailscale.com/net/tstun+
|
|
tailscale.com/tstime/rate from tailscale.com/wgengine/filter
|
|
tailscale.com/types/dnstype from tailscale.com/ipn/ipnlocal+
|
|
tailscale.com/types/empty from tailscale.com/control/controlclient+
|
|
tailscale.com/types/flagtype from tailscale.com/cmd/tailscaled
|
|
tailscale.com/types/ipproto from tailscale.com/net/flowtrack+
|
|
tailscale.com/types/key from tailscale.com/derp+
|
|
tailscale.com/types/logger from tailscale.com/cmd/tailscaled+
|
|
tailscale.com/types/netmap from tailscale.com/control/controlclient+
|
|
tailscale.com/types/nettype from tailscale.com/wgengine/magicsock
|
|
tailscale.com/types/opt from tailscale.com/control/controlclient+
|
|
tailscale.com/types/pad32 from tailscale.com/net/tstun+
|
|
tailscale.com/types/persist from tailscale.com/control/controlclient+
|
|
tailscale.com/types/preftype from tailscale.com/ipn+
|
|
tailscale.com/types/structs from tailscale.com/control/controlclient+
|
|
tailscale.com/types/wgkey from tailscale.com/control/controlclient+
|
|
L tailscale.com/util/cmpver from tailscale.com/net/dns
|
|
💣 tailscale.com/util/deephash from tailscale.com/ipn/ipnlocal+
|
|
tailscale.com/util/dnsname from tailscale.com/ipn/ipnstate+
|
|
LW tailscale.com/util/endian from tailscale.com/net/netns+
|
|
tailscale.com/util/groupmember from tailscale.com/ipn/ipnserver
|
|
tailscale.com/util/lineread from tailscale.com/hostinfo+
|
|
tailscale.com/util/osshare from tailscale.com/cmd/tailscaled+
|
|
tailscale.com/util/pidowner from tailscale.com/ipn/ipnserver
|
|
tailscale.com/util/racebuild from tailscale.com/logpolicy
|
|
tailscale.com/util/systemd from tailscale.com/control/controlclient+
|
|
tailscale.com/util/uniq from tailscale.com/wgengine/magicsock
|
|
tailscale.com/util/winutil from tailscale.com/logpolicy+
|
|
tailscale.com/version from tailscale.com/cmd/tailscaled+
|
|
tailscale.com/version/distro from tailscale.com/cmd/tailscaled+
|
|
W tailscale.com/wf from tailscale.com/cmd/tailscaled
|
|
tailscale.com/wgengine from tailscale.com/cmd/tailscaled+
|
|
tailscale.com/wgengine/filter from tailscale.com/control/controlclient+
|
|
tailscale.com/wgengine/magicsock from tailscale.com/wgengine+
|
|
tailscale.com/wgengine/monitor from tailscale.com/wgengine+
|
|
tailscale.com/wgengine/netstack from tailscale.com/cmd/tailscaled+
|
|
tailscale.com/wgengine/router from tailscale.com/cmd/tailscaled+
|
|
tailscale.com/wgengine/wgcfg from tailscale.com/ipn/ipnlocal+
|
|
tailscale.com/wgengine/wgcfg/nmcfg from tailscale.com/ipn/ipnlocal
|
|
tailscale.com/wgengine/wglog from tailscale.com/wgengine
|
|
W 💣 tailscale.com/wgengine/winnet from tailscale.com/wgengine/router
|
|
golang.org/x/crypto/acme from tailscale.com/ipn/localapi
|
|
golang.org/x/crypto/blake2b from golang.org/x/crypto/nacl/box
|
|
golang.org/x/crypto/blake2s from golang.zx2c4.com/wireguard/device
|
|
golang.org/x/crypto/chacha20 from golang.org/x/crypto/chacha20poly1305
|
|
golang.org/x/crypto/chacha20poly1305 from crypto/tls+
|
|
golang.org/x/crypto/cryptobyte from crypto/ecdsa+
|
|
golang.org/x/crypto/cryptobyte/asn1 from crypto/ecdsa+
|
|
golang.org/x/crypto/curve25519 from crypto/tls+
|
|
golang.org/x/crypto/hkdf from crypto/tls
|
|
golang.org/x/crypto/nacl/box from tailscale.com/derp+
|
|
golang.org/x/crypto/nacl/secretbox from golang.org/x/crypto/nacl/box
|
|
golang.org/x/crypto/poly1305 from golang.org/x/crypto/chacha20poly1305+
|
|
golang.org/x/crypto/salsa20/salsa from golang.org/x/crypto/nacl/box+
|
|
golang.org/x/net/bpf from github.com/mdlayher/netlink+
|
|
golang.org/x/net/dns/dnsmessage from net+
|
|
golang.org/x/net/http/httpguts from net/http+
|
|
golang.org/x/net/http/httpproxy from net/http
|
|
golang.org/x/net/http2/hpack from net/http
|
|
golang.org/x/net/idna from golang.org/x/net/http/httpguts+
|
|
golang.org/x/net/ipv4 from golang.zx2c4.com/wireguard/device
|
|
golang.org/x/net/ipv6 from golang.zx2c4.com/wireguard/device+
|
|
golang.org/x/net/proxy from tailscale.com/net/netns
|
|
D golang.org/x/net/route from net+
|
|
golang.org/x/sync/errgroup from tailscale.com/derp+
|
|
golang.org/x/sync/singleflight from tailscale.com/net/dnscache
|
|
golang.org/x/sys/cpu from golang.org/x/crypto/blake2b+
|
|
LD golang.org/x/sys/unix from github.com/mdlayher/netlink+
|
|
W golang.org/x/sys/windows from github.com/go-ole/go-ole+
|
|
W golang.org/x/sys/windows/registry from golang.zx2c4.com/wireguard/windows/tunnel/winipcfg+
|
|
W golang.org/x/sys/windows/svc from tailscale.com/cmd/tailscaled+
|
|
W golang.org/x/sys/windows/svc/mgr from tailscale.com/cmd/tailscaled
|
|
golang.org/x/term from tailscale.com/logpolicy
|
|
golang.org/x/text/secure/bidirule from golang.org/x/net/idna
|
|
golang.org/x/text/transform from golang.org/x/text/secure/bidirule+
|
|
golang.org/x/text/unicode/bidi from golang.org/x/net/idna+
|
|
golang.org/x/text/unicode/norm from golang.org/x/net/idna
|
|
golang.org/x/time/rate from inet.af/netstack/tcpip/stack+
|
|
bufio from compress/flate+
|
|
bytes from bufio+
|
|
compress/flate from compress/gzip
|
|
compress/gzip from internal/profile+
|
|
container/heap from inet.af/netstack/tcpip/transport/tcp
|
|
container/list from crypto/tls+
|
|
context from crypto/tls+
|
|
crypto from crypto/ecdsa+
|
|
crypto/aes from crypto/ecdsa+
|
|
crypto/cipher from crypto/aes+
|
|
crypto/des from crypto/tls+
|
|
crypto/dsa from crypto/x509
|
|
crypto/ecdsa from crypto/tls+
|
|
crypto/ed25519 from crypto/tls+
|
|
crypto/elliptic from crypto/ecdsa+
|
|
crypto/hmac from crypto/tls+
|
|
crypto/md5 from crypto/tls+
|
|
crypto/rand from crypto/ed25519+
|
|
crypto/rc4 from crypto/tls
|
|
crypto/rsa from crypto/tls+
|
|
crypto/sha1 from crypto/tls+
|
|
crypto/sha256 from crypto/tls+
|
|
crypto/sha512 from crypto/ecdsa+
|
|
crypto/subtle from crypto/aes+
|
|
crypto/tls from github.com/tcnksm/go-httpstat+
|
|
crypto/x509 from crypto/tls+
|
|
crypto/x509/pkix from crypto/x509+
|
|
embed from tailscale.com/net/dns+
|
|
encoding from encoding/json+
|
|
encoding/asn1 from crypto/x509+
|
|
encoding/base64 from encoding/json+
|
|
encoding/binary from compress/gzip+
|
|
encoding/hex from crypto/x509+
|
|
encoding/json from expvar+
|
|
encoding/pem from crypto/tls+
|
|
encoding/xml from github.com/tailscale/goupnp+
|
|
errors from bufio+
|
|
expvar from tailscale.com/derp+
|
|
flag from tailscale.com/cmd/tailscaled+
|
|
fmt from compress/flate+
|
|
hash from crypto+
|
|
hash/crc32 from compress/gzip+
|
|
hash/fnv from tailscale.com/wgengine/magicsock+
|
|
hash/maphash from go4.org/mem
|
|
html from net/http/pprof+
|
|
io from bufio+
|
|
io/fs from crypto/rand+
|
|
io/ioutil from github.com/godbus/dbus/v5+
|
|
log from expvar+
|
|
math from compress/flate+
|
|
math/big from crypto/dsa+
|
|
math/bits from compress/flate+
|
|
math/rand from github.com/mdlayher/netlink+
|
|
mime from mime/multipart+
|
|
mime/multipart from net/http
|
|
mime/quotedprintable from mime/multipart
|
|
net from crypto/tls+
|
|
net/http from expvar+
|
|
net/http/httptrace from github.com/tcnksm/go-httpstat+
|
|
net/http/httputil from tailscale.com/ipn/localapi
|
|
net/http/internal from net/http+
|
|
net/http/pprof from tailscale.com/cmd/tailscaled
|
|
net/textproto from golang.org/x/net/http/httpguts+
|
|
net/url from crypto/x509+
|
|
os from crypto/rand+
|
|
os/exec from github.com/coreos/go-iptables/iptables+
|
|
os/signal from tailscale.com/cmd/tailscaled+
|
|
os/user from github.com/godbus/dbus/v5+
|
|
path from github.com/godbus/dbus/v5+
|
|
path/filepath from crypto/x509+
|
|
reflect from crypto/x509+
|
|
regexp from github.com/coreos/go-iptables/iptables+
|
|
regexp/syntax from regexp
|
|
runtime/debug from github.com/klauspost/compress/zstd+
|
|
runtime/pprof from net/http/pprof+
|
|
runtime/trace from net/http/pprof
|
|
sort from compress/flate+
|
|
strconv from compress/flate+
|
|
strings from bufio+
|
|
sync from compress/flate+
|
|
sync/atomic from context+
|
|
syscall from crypto/rand+
|
|
text/tabwriter from runtime/pprof
|
|
time from compress/gzip+
|
|
unicode from bytes+
|
|
unicode/utf16 from encoding/asn1+
|
|
unicode/utf8 from bufio+
|