Francois Marier e8ebe6aba1 ssh/tailssh: parse UIDs consistently in isRootUser() ...

Since the incubator parses the UID in base 0 via flags.IntVar()
and isRootUser() uses base 10, it was possible to get inconsistent
results between the two using non-base 10 numbers.

Updates tailscale/corp#50380

Change-Id: I9b2fb16bc37153df7b695533cc73a3499cb774eb
Signed-off-by: Francois Marier <francois@tailscale.com>

2026-10-26 20:06:51 -07:00

..

testcontainers

…

accept_env_test.go

ssh/tailssh: validate accepted env values, deny GLIBC_TUNABLES, cap names

2026-10-24 13:55:35 -07:00

accept_env.go

ssh/tailssh: validate accepted env values, deny GLIBC_TUNABLES, cap names

2026-10-24 13:55:35 -07:00

auditd_linux_test.go

…

auditd_linux.go

…

c2n_test.go

ssh/tailssh: initialize username hint exclusions

2026-10-26 10:00:23 -07:00

c2n.go

ssh/tailssh: initialize username hint exclusions

2026-10-26 10:00:23 -07:00

conn_lifecycle_test.go

ssh/tailssh: register connections atomically with shutdown

2026-10-26 15:08:03 -07:00

connmonitor_plan9.go

ssh/tailssh: name the monitor for its connection-wide role

2026-10-26 15:09:58 -07:00

connmonitor.go

ssh/tailssh: name the monitor for its connection-wide role

2026-10-26 15:09:58 -07:00

delegate_test.go

ssh/tailssh: give delegated action fetches one timeout owner

2026-10-26 15:11:58 -07:00

fdleak_test.go

ssh/tailssh: name the monitor for its connection-wide role

2026-10-26 15:09:58 -07:00

fwdchild_linux_test.go

ssh/tailssh: launch sessions via the monitor

2026-10-26 07:49:11 -07:00

fwdchild_other_test.go

ssh/tailssh: launch sessions via the monitor

2026-10-26 07:49:11 -07:00

fwdchild_test.go

ssh/tailssh: dial TCP forwards as the bound user

2026-10-26 13:10:45 -07:00

fwdchild.go

ssh/tailssh: clarify lifecycle and protocol comments

2026-10-26 15:09:10 -07:00

fwdmonitor_linux_test.go

ssh/tailssh: relay Unix forward payloads as the bound user

2026-10-26 11:34:49 -07:00

fwdmonitor_test.go

ssh/tailssh: release reverse-forward cancellation callbacks

2026-10-26 17:42:07 -07:00

fwdmonitor.go

ssh/tailssh: release reverse-forward cancellation callbacks

2026-10-26 17:42:07 -07:00

fwdplan9.go

ssh/tailssh: name the monitor for its connection-wide role

2026-10-26 15:09:58 -07:00

fwdrelay_linux_test.go

ssh/tailssh: dial TCP forwards as the bound user

2026-10-26 13:10:45 -07:00

fwdrelay_test.go

ssh/tailssh: relay Unix forward payloads as the bound user

2026-10-26 11:34:49 -07:00

fwdtcp_linux_test.go

ssh/tailssh: dial TCP forwards as the bound user

2026-10-26 13:10:45 -07:00

fwdtcp_listener_test.go

ssh/tailssh: release reverse-forward cancellation callbacks

2026-10-26 17:42:07 -07:00

fwdtcp_test.go

ssh/tailssh: name the monitor for its connection-wide role

2026-10-26 15:09:58 -07:00

hostkeys_test.go

ssh/tailssh: write private host keys with 0600 permissions

2026-10-24 13:30:41 -07:00

hostkeys.go

ssh/tailssh: write private host keys with 0600 permissions

2026-10-24 13:30:41 -07:00

incubator_linux.go

…

incubator_plan9.go

ssh/tailssh: launch sessions via the monitor

2026-10-26 07:49:11 -07:00

incubator_test.go

ssh/tailssh: set $LOGNAME to same value as $USER in incubator

2026-10-26 17:25:45 -05:00

incubator.go

ssh/tailssh: set $LOGNAME to same value as $USER in incubator

2026-10-26 17:25:45 -05:00

listen_test.go

ssh/tailssh: retain the latest session window size

2026-10-26 12:11:07 -07:00

listen.go

tsnet: authorize ListenSSH peers, fix PTY emulation and session queue bound

2026-10-25 11:31:39 -07:00

localstate_test.go

ssh/tailssh: launch sessions via the monitor

2026-10-26 07:49:11 -07:00

monitor_client.go

ssh/tailssh: dial TCP forwards as the bound user

2026-10-26 13:10:45 -07:00

monitor_lifecycle_test.go

ssh/tailssh: name the monitor for its connection-wide role

2026-10-26 15:09:58 -07:00

monitor_linux.go

ssh/tailssh: add user-credential forwarding children and monitor dial/listen ops

2026-10-25 17:28:51 -07:00

monitor_other.go

ssh/tailssh: add user-credential forwarding children and monitor dial/listen ops

2026-10-25 17:28:51 -07:00

monitor_rpc_linux_test.go

ssh/tailssh: launch sessions via the monitor

2026-10-26 07:49:11 -07:00

monitor_rpc_test.go

ssh/tailssh: dial TCP forwards as the bound user

2026-10-26 13:10:45 -07:00

monitor_rpc.go

ssh/tailssh: clarify lifecycle and protocol comments

2026-10-26 15:09:10 -07:00

monitor_test.go

ssh/tailssh: launch sessions via the monitor

2026-10-26 07:49:11 -07:00

monitor_watchdog_linux_test.go

ssh/tailssh: launch sessions via the monitor

2026-10-26 07:49:11 -07:00

monitor.go

ssh/tailssh: clarify lifecycle and protocol comments

2026-10-26 15:09:10 -07:00

policy_recheck_test.go

ssh/tailssh: enforce SSH policy at the connection level

2026-10-26 08:48:36 -07:00

privs_test.go

…

process_unix_test.go

ssh/tailssh: route SSH forwarding through the privileged monitor

2026-10-25 20:08:58 -07:00

process_unix.go

ssh/tailssh: enforce SSH policy at the connection level

2026-10-26 08:48:36 -07:00

session.go

ssh/tailssh: retain the latest session window size

2026-10-26 12:11:07 -07:00

sessmonitor_test.go

ssh/tailssh: name the monitor for its connection-wide role

2026-10-26 15:09:58 -07:00

sessmonitor.go

ssh/tailssh: name the monitor for its connection-wide role

2026-10-26 15:09:58 -07:00

sftp.go

…

tailssh_exitcodes_test.go

…

tailssh_frameorder_test.go

…

tailssh_integration_exitcodes_test.go

ssh/tailssh: route SSH forwarding through the privileged monitor

2026-10-25 20:08:58 -07:00

tailssh_integration_test.go

ssh/tailssh: route SSH forwarding through the privileged monitor

2026-10-25 20:08:58 -07:00

tailssh_policy_sftp_test.go

ssh/tailssh: enforce SSH policy at the connection level

2026-10-26 08:48:36 -07:00

tailssh_policy_test.go

ssh/tailssh: dial TCP forwards as the bound user

2026-10-26 13:10:45 -07:00

tailssh_recording_failure_test.go

ssh/tailssh: enforce recording failure before notifying control

2026-10-26 10:44:30 -07:00

tailssh_recording_notify_test.go

ssh/tailssh: enforce recording failure before notifying control

2026-10-26 10:44:30 -07:00

tailssh_test.go

ssh/tailssh: parse UIDs consistently in isRootUser()

2026-10-26 20:06:51 -07:00

tailssh.go

ssh/tailssh: give delegated action fetches one timeout owner

2026-10-26 15:11:58 -07:00

user_lookup_test.go

ssh/tailssh: enforce SSH policy at the connection level

2026-10-26 08:48:36 -07:00

user_unix.go

ssh/tailssh: parse UIDs consistently in isRootUser()

2026-10-26 20:06:51 -07:00

user.go

ssh/tailssh: enforce SSH policy at the connection level

2026-10-26 08:48:36 -07:00