diff options
| author | shayne <shayne@tailscale.com> | 2023-01-20 13:40:56 -0500 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-01-20 13:40:56 -0500 |
| commit | 4471e403aaee9981f4e7f091c7e29956a9aa17bf (patch) | |
| tree | c7bd5cf6b085b7910c6b0cc59e4ce91cad6c9781 /control/controlknobs | |
| parent | 6793685bba9b6295aa1a6a862047e0c5a49f7858 (diff) | |
| download | tailscale-4471e403aaee9981f4e7f091c7e29956a9aa17bf.tar.xz tailscale-4471e403aaee9981f4e7f091c7e29956a9aa17bf.zip | |
ipn/ipnlocal: [serve] listen on all-interfaces for macOS sandboxed (#6771)
On macOS (AppStore and macsys), we need to bind to ""/all-interfaces
due to the network sandbox. Ideally we would only bind to the
Tailscale interface, but macOS errors out if we try to
to listen on privileged ports binding only to a specific
interface.
We also implement the lc.Control hook, same as we do for
peerapi. It doesn't solve our problem but it's better that
we do and would likely be required when Apple gets around to
fixing per-interface priviliged port binding.
Fixes: #6364
Signed-off-by: Shayne Sweeney <shayne@tailscale.com>
Diffstat (limited to 'control/controlknobs')
0 files changed, 0 insertions, 0 deletions