Mike Jensen 0eb38dc2e5 ipn,magicsock: deny peer capabilities to unsigned peers (#20561) ...

Unsigned peers aren't covered by tailnet lock, so they must never hold peer capabilities even if the packet filter grants them. This change extends the check for unsigned-peers to ensure full coverage in capabilities.

Fixes tailscale/corp#45116

Change-Id: I918af24f0b9855e55921cbdad109cc68e745e125

Signed-off-by: Mike Jensen <mikej@tailscale.com>

2026-07-22 08:27:15 -06:00

..

auto_test.go

control/controlclient: fix map context race

2026-06-01 13:44:19 -07:00

auto.go

ipn/ipnlocal,wgengine: move disco-key change detection to nodeBackend

2026-07-14 06:32:35 -07:00

client.go

control,health,ipn: move IP forwarding check to health tracker (#19007)

2026-03-18 16:24:12 -04:00

controlclient_test.go

control/controlclient: handle 429 responses during node registration

2026-04-15 18:54:08 +01:00

direct_test.go

control/controlclient: handle 429 responses during node registration

2026-04-15 18:54:08 +01:00

direct.go

ipn/ipnlocal,wgengine: move disco-key change detection to nodeBackend

2026-07-14 06:32:35 -07:00

errors.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

map_debug.go

control/controlclient: add patchify miss stats

2026-04-15 08:05:57 -07:00

map_test.go

ipn,magicsock: deny peer capabilities to unsigned peers (#20561)

2026-07-22 08:27:15 -06:00

map.go

ipn,magicsock: deny peer capabilities to unsigned peers (#20561)

2026-07-22 08:27:15 -06:00

sign_supported_test.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

sign_supported.go

control/controlclient: enable request signatures on macOS (#19317)

2026-04-15 14:11:14 -04:00

sign_unsupported.go

control/controlclient: enable request signatures on macOS (#19317)

2026-04-15 14:11:14 -04:00

sign.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

status.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00