tailscale

mirror of https://github.com/tailscale/tailscale.git synced 2025-02-22 12:58:37 +00:00

History

Nick Khyl 00fe8845b1 ipn/{ipnauth,ipnlocal,ipnserver}: move the AlwaysOn policy check from ipnserver to ipnauth

In this PR, we move the code that checks the AlwaysOn policy from ipnserver.actor to ipnauth.
It is intended to be used by ipnauth.Actor implementations, and we temporarily make it exported
while these implementations reside in ipnserver and in corp. We'll unexport it later.

We also update [ipnauth.Actor.CheckProfileAccess] to accept an auditLogger, which is called
to write details about the action to the audit log when required by the policy, and update
LocalBackend.EditPrefsAs to use an auditLogger that writes to the regular backend log.

Updates tailscale/corp#26146

Signed-off-by: Nick Khyl <nickk@tailscale.com>

2025-02-04 14:36:01 -06:00

access.go

ipn/ipnauth,util/syspolicy: improve comments

2025-01-31 11:33:13 -06:00

actor.go

ipn/{ipnauth,ipnlocal,ipnserver}: move the AlwaysOn policy check from ipnserver to ipnauth

2025-02-04 14:36:01 -06:00

ipnauth_notwindows.go

ipn/{ipnauth,ipnlocal,ipnserver}: send the auth URL to the user who started interactive login

2024-10-18 15:10:02 -05:00

ipnauth_windows.go

ipn/ipnserver: always allow Windows SYSTEM user to connect