Mike Jensen db8fd8499b ssh/tailssh: harden acceptEnv env transport, restore --encoded-env for skew ...

Changes included on top of the original commit:
  * Unify client-env checks through one shared filter, now also blocking GOTRACEBACK against secret re-leaks via crash dumps.
  * Never let forwarded vars override server-set keys in the child process.
  * Restore compatability for deployments and long term via --encoded-env as deprecated for outdated parents, with a loud warning to update tailscaled for security fixes.
  * Minor doc and comment corrections, including the nil-Cmd.Env state and the stale TODO.
  * Added end-to-end unit tests proving forwarded secrets reach the session but are not in flags or logged.

Change-Id: I58640515ebb9090ba419918d3c124c5482d63905

Change-Id: I73df55f9bb55e05690d337059f3bc1a294d27d90
Signed-off-by: Mike Jensen <mikej@tailscale.com>

2026-07-24 19:42:42 +00:00

..

tailssh

ssh/tailssh: harden acceptEnv env transport, restore --encoded-env for skew

2026-07-24 19:42:42 +00:00