tailscale

0 Fork 0

mirror of https://github.com/tailscale/tailscale.git synced 2026-11-10 06:24:48 +09:00

Files

T

Mike Jensen db8fd8499b ssh/tailssh: harden acceptEnv env transport, restore --encoded-env for skew

Changes included on top of the original commit:
  * Unify client-env checks through one shared filter, now also blocking GOTRACEBACK against secret re-leaks via crash dumps.
  * Never let forwarded vars override server-set keys in the child process.
  * Restore compatability for deployments and long term via --encoded-env as deprecated for outdated parents, with a loud warning to update tailscaled for security fixes.
  * Minor doc and comment corrections, including the nil-Cmd.Env state and the stale TODO.
  * Added end-to-end unit tests proving forwarded secrets reach the session but are not in flags or logged.

Change-Id: I58640515ebb9090ba419918d3c124c5482d63905

Change-Id: I73df55f9bb55e05690d337059f3bc1a294d27d90
Signed-off-by: Mike Jensen <mikej@tailscale.com>

2026-07-24 19:42:42 +00:00

testcontainers

ssh/tailssh: speed up SSH integration tests

2026-04-13 14:18:27 -07:00

accept_env_test.go

ssh/tailssh: harden acceptEnv env transport, restore --encoded-env for skew

2026-07-24 19:42:42 +00:00

accept_env.go

ssh/tailssh: harden acceptEnv env transport, restore --encoded-env for skew

2026-07-24 19:42:42 +00:00

auditd_linux_test.go

all: remove AUTHORS file and references to it