Francois Marier 83b3257857 ssh/tailssh: parse UIDs consistently in isRootUser() ...

Since the incubator parses the UID in base 0 via flags.IntVar()
and isRootUser() uses base 10, it was possible to get inconsistent
results between the two using non-base 10 numbers.

Updates tailscale/corp#50380

Change-Id: I9b2fb16bc37153df7b695533cc73a3499cb774eb
Signed-off-by: Francois Marier <francois@tailscale.com>
(cherry picked from commit e8ebe6aba1)

2026-10-27 20:14:22 +00:00

..

testcontainers

ssh/tailssh: speed up SSH integration tests

2026-04-13 14:18:27 -07:00

accept_env_test.go

ssh/tailssh: validate accepted env values, deny GLIBC_TUNABLES, cap names

2026-10-27 20:12:07 +00:00

accept_env.go

ssh/tailssh: validate accepted env values, deny GLIBC_TUNABLES, cap names

2026-10-27 20:12:07 +00:00

auditd_linux_test.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

auditd_linux.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

c2n_test.go

ssh/tailssh: initialize username hint exclusions

2026-10-27 20:14:22 +00:00

c2n.go

ssh/tailssh: initialize username hint exclusions

2026-10-27 20:14:22 +00:00

conn_lifecycle_test.go

ssh/tailssh: register connections atomically with shutdown

2026-10-27 20:14:22 +00:00

connmonitor_plan9.go

ssh/tailssh: name the monitor for its connection-wide role

2026-10-27 20:14:22 +00:00

connmonitor.go

ssh/tailssh: name the monitor for its connection-wide role

2026-10-27 20:14:22 +00:00

delegate_test.go

ssh/tailssh: give delegated action fetches one timeout owner

2026-10-27 20:14:22 +00:00

fdleak_test.go

ssh/tailssh: name the monitor for its connection-wide role

2026-10-27 20:14:22 +00:00

fwdchild_linux_test.go

ssh/tailssh: launch sessions via the monitor

2026-10-27 20:14:15 +00:00

fwdchild_other_test.go

ssh/tailssh: launch sessions via the monitor

2026-10-27 20:14:15 +00:00

fwdchild_test.go

ssh/tailssh: dial TCP forwards as the bound user

2026-10-27 20:14:22 +00:00

fwdchild.go

ssh/tailssh: clarify lifecycle and protocol comments

2026-10-27 20:14:22 +00:00

fwdmonitor_linux_test.go

ssh/tailssh: relay Unix forward payloads as the bound user

2026-10-27 20:14:22 +00:00

fwdmonitor_test.go

ssh/tailssh: release reverse-forward cancellation callbacks

2026-10-27 20:14:22 +00:00

fwdmonitor.go

ssh/tailssh: release reverse-forward cancellation callbacks

2026-10-27 20:14:22 +00:00

fwdplan9.go

ssh/tailssh: name the monitor for its connection-wide role

2026-10-27 20:14:22 +00:00

fwdrelay_linux_test.go

ssh/tailssh: dial TCP forwards as the bound user

2026-10-27 20:14:22 +00:00

fwdrelay_test.go

ssh/tailssh: relay Unix forward payloads as the bound user

2026-10-27 20:14:22 +00:00

fwdtcp_linux_test.go

ssh/tailssh: dial TCP forwards as the bound user

2026-10-27 20:14:22 +00:00

fwdtcp_listener_test.go

ssh/tailssh: release reverse-forward cancellation callbacks

2026-10-27 20:14:22 +00:00

fwdtcp_test.go

ssh/tailssh: name the monitor for its connection-wide role

2026-10-27 20:14:22 +00:00

hostkeys_test.go

ssh/tailssh: write private host keys with 0600 permissions

2026-10-27 20:12:07 +00:00

hostkeys.go

ssh/tailssh: write private host keys with 0600 permissions

2026-10-27 20:12:07 +00:00

incubator_linux.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

incubator_plan9.go

ssh/tailssh: launch sessions via the monitor

2026-10-27 20:14:15 +00:00

incubator_test.go

ssh/tailssh: set $LOGNAME to same value as $USER in incubator

2026-10-27 20:14:22 +00:00

incubator.go

ssh/tailssh: set $LOGNAME to same value as $USER in incubator

2026-10-27 20:14:22 +00:00

listen_test.go

ssh/tailssh: retain the latest session window size

2026-10-27 20:14:22 +00:00

listen.go

tsnet: authorize ListenSSH peers, fix PTY emulation and session queue bound

2026-10-27 20:13:56 +00:00

localstate_test.go

ssh/tailssh: launch sessions via the monitor

2026-10-27 20:14:15 +00:00

monitor_client.go

ssh/tailssh: dial TCP forwards as the bound user

2026-10-27 20:14:22 +00:00

monitor_lifecycle_test.go

ssh/tailssh: name the monitor for its connection-wide role

2026-10-27 20:14:22 +00:00

monitor_linux.go

ssh/tailssh: add user-credential forwarding children and monitor dial/listen ops

2026-10-27 20:14:02 +00:00

monitor_other.go

ssh/tailssh: add user-credential forwarding children and monitor dial/listen ops

2026-10-27 20:14:02 +00:00

monitor_rpc_linux_test.go

ssh/tailssh: launch sessions via the monitor

2026-10-27 20:14:15 +00:00

monitor_rpc_test.go

ssh/tailssh: dial TCP forwards as the bound user

2026-10-27 20:14:22 +00:00

monitor_rpc.go

ssh/tailssh: clarify lifecycle and protocol comments

2026-10-27 20:14:22 +00:00

monitor_test.go

ssh/tailssh: launch sessions via the monitor

2026-10-27 20:14:15 +00:00

monitor_watchdog_linux_test.go

ssh/tailssh: launch sessions via the monitor

2026-10-27 20:14:15 +00:00

monitor.go

ssh/tailssh: clarify lifecycle and protocol comments

2026-10-27 20:14:22 +00:00

policy_recheck_test.go

ssh/tailssh: enforce SSH policy at the connection level

2026-10-27 20:14:22 +00:00

privs_test.go

tstest: add RequireRoot helper

2026-04-10 10:48:50 -07:00

process_unix_test.go

ssh/tailssh: route SSH forwarding through the privileged monitor

2026-10-27 20:14:02 +00:00

process_unix.go

ssh/tailssh: enforce SSH policy at the connection level

2026-10-27 20:14:22 +00:00

session.go

ssh/tailssh: retain the latest session window size

2026-10-27 20:14:22 +00:00

sessmonitor_test.go

ssh/tailssh: name the monitor for its connection-wide role

2026-10-27 20:14:22 +00:00

sessmonitor.go

ssh/tailssh: name the monitor for its connection-wide role

2026-10-27 20:14:22 +00:00

sftp.go

ssh/tailssh: split the OS-specific parts of the server into their own files

2026-09-15 19:32:40 -07:00

tailssh_exitcodes_test.go

ssh/tailssh: test exit-status frame ordering and stderr drain

2026-07-30 10:18:00 +02:00

tailssh_frameorder_test.go

ssh/tailssh: test exit-status frame ordering and stderr drain

2026-07-30 10:18:00 +02:00

tailssh_integration_exitcodes_test.go

ssh/tailssh: route SSH forwarding through the privileged monitor

2026-10-27 20:14:02 +00:00

tailssh_integration_test.go

ssh/tailssh: route SSH forwarding through the privileged monitor

2026-10-27 20:14:02 +00:00

tailssh_policy_sftp_test.go

ssh/tailssh: enforce SSH policy at the connection level

2026-10-27 20:14:22 +00:00

tailssh_policy_test.go

ssh/tailssh: dial TCP forwards as the bound user

2026-10-27 20:14:22 +00:00

tailssh_recording_failure_test.go

ssh/tailssh: enforce recording failure before notifying control

2026-10-27 20:14:22 +00:00

tailssh_recording_notify_test.go

ssh/tailssh: enforce recording failure before notifying control

2026-10-27 20:14:22 +00:00

tailssh_test.go

ssh/tailssh: parse UIDs consistently in isRootUser()

2026-10-27 20:14:22 +00:00

tailssh.go

ssh/tailssh: give delegated action fetches one timeout owner

2026-10-27 20:14:22 +00:00

user_lookup_test.go

ssh/tailssh: enforce SSH policy at the connection level

2026-10-27 20:14:22 +00:00

user_unix.go

ssh/tailssh: parse UIDs consistently in isRootUser()

2026-10-27 20:14:22 +00:00

user.go

ssh/tailssh: enforce SSH policy at the connection level

2026-10-27 20:14:22 +00:00