summaryrefslogtreecommitdiffhomepage
path: root/ssh
AgeCommit message (Expand)AuthorFilesLines
2022-08-04syncs, all: move to using Go's new atomic types instead of oursBrad Fitzpatrick1-4/+4
2022-08-02all: migrate more code code to net/netip directlyBrad Fitzpatrick1-3/+2
2022-08-02ssh/tailssh: fix deadlock in expandDelegateURLMaisem Ali1-4/+2
2022-07-25all: convert more code to use net/netip directlyBrad Fitzpatrick1-4/+4
2022-07-25all: use various net/netip parse funcs directlyBrad Fitzpatrick2-5/+6
2022-07-25net/netaddr: start migrating to net/netip via new netaddr adapter packageBrad Fitzpatrick3-12/+12
2022-07-21ssh/tailssh: add "ssh" to conn logsMaisem Ali1-1/+1
2022-07-21ssh/tailssh: handle not-authenticated-yet connections in matchRuleMaisem Ali3-14/+75
2022-07-15ssh/tailssh: better handling of signals and exitsMaisem Ali2-12/+29
2022-06-28ssh/tailssh: fix Tailscale SSH to Linux Arch machinesBrad Fitzpatrick1-0/+14
2022-06-27ssh/tailssh: fix logging typoMaisem Ali1-1/+1
2022-06-27ssh/tailssh: always use current time for policy evaluationMaisem Ali2-10/+6
2022-06-27ssh/tailssh: allow multiple sessions on the same connMaisem Ali2-106/+145
2022-06-25ssh/tailssh: limit setgroups to 16 on macOSAdam Eijdenberg3-1/+18
2022-06-25ssh/tailssh: fix /usr/bin/login args on macOSAdam Eijdenberg3-1/+14
2022-06-02ssh/tailssh: add metricsBrad Fitzpatrick1-2/+44
2022-05-30ipn/ipnlocal: shutdown sshServer on tailscale downMaisem Ali1-2/+2
2022-05-28ssh/tailssh: terminate sessions on stdout copy failuresMaisem Ali1-5/+6
2022-05-28ssh/tailssh: terminate sessions when tailscaled shutsdownMaisem Ali1-8/+45
2022-05-28ssh/tailssh: only use `login` with TTY sessionsMaisem Ali1-2/+4
2022-05-09ssh/tailssh: exec into `login` when launching a shellMaisem Ali1-3/+23
2022-05-09ssh/tailssh: refactor incubator flagsMaisem Ali2-32/+49
2022-05-05ssh/tailssh: handle Control-C during hold-and-delegate promptBrad Fitzpatrick2-3/+152
2022-04-29ssh/tailssh,ipn/ipnlocal: terminate any active sessions on `up --ssh=false`Maisem Ali1-0/+3
2022-04-21util/mak: move tailssh's mapSet into a new package for reuse elsewhereBrad Fitzpatrick1-11/+4
2022-04-21ssh/tailssh: avoid user ssh configuration in testsJames Tucker1-0/+2
2022-04-21ssh/tailssh: various typo fixes, clarifications.David Anderson2-18/+19
2022-04-21ssh/tailssh: simplify matchRule with Reject rulesBrad Fitzpatrick1-1/+4
2022-04-21ssh/tailssh: chmod the auth socket to be only user accessibleMaisem Ali1-1/+5
2022-04-21ssh/tailssh: set groups and gid in the incubated processMaisem Ali2-4/+32
2022-04-21ssh/tailssh: filter accepted environment variablesBrad Fitzpatrick2-1/+35
2022-04-21tailcfg: fix typo in SessionDuration field nameBrad Fitzpatrick1-3/+3
2022-04-21ssh/tailssh: add support for sftpMaisem Ali2-44/+99
2022-04-20ssh/tailssh: fix double SSH-2.0- prefix in greeting bannerBrad Fitzpatrick1-1/+1
2022-04-20ssh/tailssh: send banner messages during auth, move more to connMaisem Ali3-183/+192
2022-04-20ssh/tailssh: support expansions in public key fetch URL tooBrad Fitzpatrick2-1/+37
2022-04-20ssh/tailssh: terminate ssh auth early if no policy can matchMaisem Ali2-142/+215
2022-04-20ipn/ipnlocal: reject tailscale up --ssh if disabled on tailnetBrad Fitzpatrick1-2/+2
2022-04-18ssh/tailssh: make checkStillValid also consider username changesMaisem Ali1-2/+2
2022-04-18ssh/tailssh: cache public keys fetched from URLsBrad Fitzpatrick2-21/+172
2022-04-17ssh/tailssh: close sessions on policy change if no longer allowedBrad Fitzpatrick1-26/+46
2022-04-15ssh/tailssh: make the SSH server a singleton, register with LocalBackendBrad Fitzpatrick1-35/+33
2022-04-15tailcfg, ssh/tailssh: optionally support SSH public keys in wire policyBrad Fitzpatrick3-54/+230
2022-03-29go.mod, ssh/tailssh, tempfork/gliderlabs: bump x/crypto/ssh fork for NoClient...Brad Fitzpatrick1-0/+5
2022-03-26tempfork: temporarily fork gliderlabs/ssh and x/crypto/sshBrad Fitzpatrick3-3/+3
2022-03-22ssh/tailssh, tailcfg: add more HoldAndDelegate expansions, documentBrad Fitzpatrick1-4/+7
2022-03-22ssh/tailssh: support placeholders in SSHAction.HoldAndDelegate URLBrad Fitzpatrick2-28/+64
2022-03-21tailcfg, ssh/tailssh: make SSHUser value '=' map ssh-user to same local-userBrad Fitzpatrick2-3/+19
2022-03-19ssh/tailssh: start of implementing optional session recordingBrad Fitzpatrick1-5/+193
2022-03-18all: use cibuild.OnJosh Bleecher Snyder1-6/+3