Patrick O'Doherty 2e72593fbf feature/clientupdate: require write access for update/install localapi (#21360) ...

The update/install localapi handler had no PermitWrite check, so any
local user who could reach the localapi socket could make the root
daemon self-update and restart itself. This has been the case since the
endpoint was added in November 2023.

Gate the handler behind PermitWrite so that only root or the operator
user can trigger a self-update, matching the other mutating handlers.

Updates tailscale/corp#48187

Change-Id: Iadfef939f5dab684652cd220e77de63b54bfca2f
Reported-by: Ben Carman <benthecarman@live.com>

Signed-off-by: Patrick O'Doherty <patrick@tailscale.com>

2026-09-17 14:30:40 -07:00

..

clientupdate_test.go

feature/clientupdate: require write access for update/install localapi (#21360)

2026-09-17 14:30:40 -07:00

clientupdate.go

feature/clientupdate: require write access for update/install localapi (#21360)

2026-09-17 14:30:40 -07:00