James Tucker 5cb033d61e ssh/tailssh: initialize username hint exclusions ...

Allocate the exclusion set before adding client-supplied usernames. A true Exclude entry otherwise panics when SSH is enabled.

Exercise the c2n handler with true, false, absent, and unknown exclusions, and cover the result cap and disabled-SSH behavior.

Updates tailscale/corp#50380

Signed-off-by: James Tucker <james@tailscale.com>
Change-Id: I1d9faf36e5809ccff888fc402329652e8b7d88c8

2026-10-26 10:00:23 -07:00

..

testcontainers

…

accept_env_test.go

ssh/tailssh: validate accepted env values, deny GLIBC_TUNABLES, cap names

2026-10-24 13:55:35 -07:00

accept_env.go

ssh/tailssh: validate accepted env values, deny GLIBC_TUNABLES, cap names

2026-10-24 13:55:35 -07:00

auditd_linux_test.go

…

auditd_linux.go

…

c2n_test.go

ssh/tailssh: initialize username hint exclusions

2026-10-26 10:00:23 -07:00

c2n.go

ssh/tailssh: initialize username hint exclusions

2026-10-26 10:00:23 -07:00

fdleak_test.go

ssh/tailssh: enforce SSH policy at the connection level

2026-10-26 08:48:36 -07:00

fwdchild_linux_test.go

ssh/tailssh: launch sessions via the monitor

2026-10-26 07:49:11 -07:00

fwdchild_other_test.go

ssh/tailssh: launch sessions via the monitor

2026-10-26 07:49:11 -07:00

fwdchild_test.go

ssh/tailssh: launch sessions via the monitor

2026-10-26 07:49:11 -07:00

fwdchild.go

ssh/tailssh: route SSH forwarding through the privileged monitor

2026-10-25 20:08:58 -07:00

fwdmonitor_test.go

ssh/tailssh: enforce SSH policy at the connection level

2026-10-26 08:48:36 -07:00

fwdmonitor.go

ssh/tailssh: launch sessions via the monitor

2026-10-26 07:49:11 -07:00

fwdplan9.go

ssh/tailssh: route SSH forwarding through the privileged monitor

2026-10-25 20:08:58 -07:00

hostkeys_test.go

ssh/tailssh: write private host keys with 0600 permissions

2026-10-24 13:30:41 -07:00

hostkeys.go

ssh/tailssh: write private host keys with 0600 permissions

2026-10-24 13:30:41 -07:00

incubator_linux.go

…

incubator_plan9.go

ssh/tailssh: launch sessions via the monitor

2026-10-26 07:49:11 -07:00

incubator_test.go

ssh/tailssh: launch sessions via the monitor

2026-10-26 07:49:11 -07:00

incubator.go

ssh/tailssh: launch sessions via the monitor

2026-10-26 07:49:11 -07:00

listen_test.go

tsnet: authorize ListenSSH peers, fix PTY emulation and session queue bound

2026-10-25 11:31:39 -07:00

listen.go

tsnet: authorize ListenSSH peers, fix PTY emulation and session queue bound

2026-10-25 11:31:39 -07:00

localstate_test.go

ssh/tailssh: launch sessions via the monitor

2026-10-26 07:49:11 -07:00

monitor_client.go

ssh/tailssh: launch sessions via the monitor

2026-10-26 07:49:11 -07:00

monitor_lifecycle_test.go

ssh/tailssh: launch sessions via the monitor

2026-10-26 07:49:11 -07:00

monitor_linux.go

ssh/tailssh: add user-credential forwarding children and monitor dial/listen ops

2026-10-25 17:28:51 -07:00

monitor_other.go

ssh/tailssh: add user-credential forwarding children and monitor dial/listen ops

2026-10-25 17:28:51 -07:00

monitor_rpc_linux_test.go

ssh/tailssh: launch sessions via the monitor

2026-10-26 07:49:11 -07:00

monitor_rpc_test.go

ssh/tailssh: launch sessions via the monitor

2026-10-26 07:49:11 -07:00

monitor_rpc.go

ssh/tailssh: launch sessions via the monitor

2026-10-26 07:49:11 -07:00

monitor_test.go

ssh/tailssh: launch sessions via the monitor

2026-10-26 07:49:11 -07:00

monitor_watchdog_linux_test.go

ssh/tailssh: launch sessions via the monitor

2026-10-26 07:49:11 -07:00

monitor.go

ssh/tailssh: launch sessions via the monitor

2026-10-26 07:49:11 -07:00

policy_recheck_test.go

ssh/tailssh: enforce SSH policy at the connection level

2026-10-26 08:48:36 -07:00

privs_test.go

…

process_unix_test.go

ssh/tailssh: route SSH forwarding through the privileged monitor

2026-10-25 20:08:58 -07:00

process_unix.go

ssh/tailssh: enforce SSH policy at the connection level

2026-10-26 08:48:36 -07:00

session.go

tsnet: authorize ListenSSH peers, fix PTY emulation and session queue bound

2026-10-25 11:31:39 -07:00

sessmonitor_test.go

ssh/tailssh: enforce SSH policy at the connection level

2026-10-26 08:48:36 -07:00

sessmonitor.go

ssh/tailssh: launch sessions via the monitor

2026-10-26 07:49:11 -07:00

sftp.go

…

tailssh_exitcodes_test.go

…

tailssh_frameorder_test.go

…

tailssh_integration_exitcodes_test.go

ssh/tailssh: route SSH forwarding through the privileged monitor

2026-10-25 20:08:58 -07:00

tailssh_integration_test.go

ssh/tailssh: route SSH forwarding through the privileged monitor

2026-10-25 20:08:58 -07:00

tailssh_policy_sftp_test.go

ssh/tailssh: enforce SSH policy at the connection level

2026-10-26 08:48:36 -07:00

tailssh_policy_test.go

ssh/tailssh: enforce SSH policy at the connection level

2026-10-26 08:48:36 -07:00

tailssh_test.go

ssh/tailssh: enforce SSH policy at the connection level

2026-10-26 08:48:36 -07:00

tailssh.go

ssh/tailssh: enforce SSH policy at the connection level

2026-10-26 08:48:36 -07:00

user_lookup_test.go

ssh/tailssh: enforce SSH policy at the connection level

2026-10-26 08:48:36 -07:00

user_unix.go

ssh/tailssh: unify defaultPathForUser to use isRootUser (#21928)

2026-10-24 15:54:15 -06:00

user.go

ssh/tailssh: enforce SSH policy at the connection level

2026-10-26 08:48:36 -07:00