James Tucker 729cd431b3 ssh/tailssh: record sftp sessions and honor recording failure policy ...

Remove the blanket sftp-subsystem exemption from session recording:
in a recording-mandatory tailnet, sftp sessions (and scp -s, which
rides the sftp subsystem) now go through recording setup with the same
OnRecordingFailure semantics — an unreachable recorder refuses the
session (exit 254) instead of letting file access proceed silently
unrecorded.

SFTP casts are metadata-only: the CastHeader identifies the peer, local
user, connection, and records Command = "sftp" (subsystem requests
carry no command string), but no I/O events are captured — the SFTP
wire protocol is binary, so pass-through capture would not be
human-meaningful and would balloon cast sizes. The upload/cleanup
lifecycle is unchanged. With no recorders configured, sftp is
unchanged.

Updates tailscale/corp#50380

Signed-off-by: James Tucker <james@tailscale.com>

2026-10-24 16:08:17 -07:00

..

testcontainers

…

accept_env_test.go

ssh/tailssh: validate accepted env values, deny GLIBC_TUNABLES, cap names

2026-10-24 13:55:35 -07:00

accept_env.go

ssh/tailssh: validate accepted env values, deny GLIBC_TUNABLES, cap names

2026-10-24 13:55:35 -07:00

auditd_linux_test.go

…

auditd_linux.go

…

c2n_test.go

ssh/tailssh: fix off-by-one and clamp c2n SSH username hint cap

2026-10-24 14:10:24 -07:00

c2n.go

ssh/tailssh: fix off-by-one and clamp c2n SSH username hint cap

2026-10-24 14:10:24 -07:00

hostkeys_test.go

ssh/tailssh: write private host keys with 0600 permissions

2026-10-24 13:30:41 -07:00

hostkeys.go

ssh/tailssh: write private host keys with 0600 permissions

2026-10-24 13:30:41 -07:00

incubator_linux.go

…

incubator_plan9.go

ssh/tailssh: unify defaultPathForUser to use isRootUser (#21928)

2026-10-24 15:54:15 -06:00

incubator_test.go

ssh/tailssh: refuse direct-exec fallback for non-root users as root

2026-10-24 13:52:48 -07:00

incubator.go

ssh/tailssh: unify defaultPathForUser to use isRootUser (#21928)

2026-10-24 15:54:15 -06:00

listen.go

…

localstate_test.go

…

privs_test.go

…

process_unix_test.go

ssh/tailssh: hand the agent forwarding dir to the user, remove it on session end

2026-10-24 13:52:38 -07:00

process_unix.go

ssh/tailssh: hand the agent forwarding dir to the user, remove it on session end

2026-10-24 13:52:38 -07:00

session.go

…

sftp.go

…

tailssh_exitcodes_test.go

…

tailssh_frameorder_test.go

…

tailssh_integration_exitcodes_test.go

…

tailssh_integration_test.go

…

tailssh_test.go

ssh/tailssh: record sftp sessions and honor recording failure policy

2026-10-24 16:08:17 -07:00

tailssh.go

ssh/tailssh: record sftp sessions and honor recording failure policy

2026-10-24 16:08:17 -07:00

user_unix.go

ssh/tailssh: unify defaultPathForUser to use isRootUser (#21928)

2026-10-24 15:54:15 -06:00

user.go

…