tailscale/ipn
Andrew Lytvynov f0bc95a066
ipn/localapi: make serveTKASign require write permission (#10094)
The existing read permission check looks like an oversight. Write seems
more appropriate for sining new nodes.

Updates https://github.com/tailscale/corp/issues/15506

Signed-off-by: Andrew Lytvynov <awly@tailscale.com>
2023-11-02 17:01:26 -06:00
..
conffile ipn/{conffile,ipnlocal}: start booting tailscaled from a config file w/ auth key 2023-10-17 07:12:49 -07:00
ipnauth ipn, safesocket: use Windows token in LocalAPI 2023-10-26 09:43:19 -06:00
ipnlocal client/web: add ServerMode to web.Server 2023-11-02 17:20:05 -04:00
ipnserver ipn, safesocket: use Windows token in LocalAPI 2023-10-26 09:43:19 -06:00
ipnstate client/web: restrict full management client behind browser sessions 2023-10-05 17:21:39 -04:00
localapi ipn/localapi: make serveTKASign require write permission (#10094) 2023-11-02 17:01:26 -06:00
policy ipn: prefer allow/denylist terminology 2023-04-04 08:02:50 -07:00
store cmd/k8s-operator,ipn/store/kubestore: patch secrets instead of updating 2023-08-29 13:24:05 -07:00
backend.go cmd/tailscale,ipn/ipnlocal: print debug component names 2023-10-03 06:07:34 -07:00
conf.go ipn: add user pref for running web client 2023-10-31 10:34:56 -07:00
doc.go all: update copyright and license headers 2023-01-27 15:36:29 -08:00
fake_test.go all: update copyright and license headers 2023-01-27 15:36:29 -08:00
ipn_clone.go ipn: introduce app connector advertisement preference and flags 2023-11-01 10:58:54 -07:00
ipn_test.go net/packet: split off checksum munging into different pkg 2023-10-11 14:25:58 -07:00
ipn_view.go ipn: introduce app connector advertisement preference and flags 2023-11-01 10:58:54 -07:00
prefs_test.go ipn: introduce app connector advertisement preference and flags 2023-11-01 10:58:54 -07:00
prefs.go ipn: introduce app connector advertisement preference and flags 2023-11-01 10:58:54 -07:00
serve_test.go ipn/localapi: require local Windows admin to set serve path (#9969) 2023-10-26 14:40:44 -07:00
serve.go ipn/localapi: require local Windows admin to set serve path (#9969) 2023-10-26 14:40:44 -07:00
store_test.go ipn: avoid useless no-op WriteState calls 2023-08-07 08:44:24 -07:00
store.go ipn: avoid useless no-op WriteState calls 2023-08-07 08:44:24 -07:00