tailscale/ssh/tailssh
Andrew Dunham e985c6e58f ssh/tailssh: try fetching group IDs for user with the 'id' command
Since the tailscaled binaries that we distribute are static and don't
link cgo, we previously wouldn't fetch group IDs that are returned via
NSS. Try shelling out to the 'id' command, similar to how we call
'getent', to detect such cases.

Updates #11682

Signed-off-by: Andrew Dunham <andrew@du.nham.ca>
Change-Id: I9bdc938bd76c71bc130d44a97cc2233064d64799
2024-04-23 08:54:17 -05:00
..
incubator_linux.go all: update copyright and license headers 2023-01-27 15:36:29 -08:00
incubator.go ssh/tailssh: add envknobs to force override forwarding, sftp, pty 2023-11-09 13:37:54 -08:00
privs_test.go all: use Go 1.21 slices, maps instead of x/exp/{slices,maps} 2023-08-17 08:42:35 -07:00
tailssh_test.go all: use Go 1.22 range-over-int 2024-04-16 15:32:38 -07:00
tailssh.go ipn/ipnlocal,ssh/tailssh: reject c2n /update if SSH conns are active (#11820) 2024-04-22 10:27:12 -06:00
user.go ssh/tailssh: try fetching group IDs for user with the 'id' command 2024-04-23 08:54:17 -05:00