Sam Jean 713be260c3 ipn/ipnlocal: refuse serving TCP to the tailscaled socket (#21966) ...

tailscale serve --tcp=<port> unix:<path> dialed the target socket with
no check, so pointing it at tailscaled's own LocalAPI socket proxied a
tailnet peer straight into the LocalAPI. The LocalAPI authorizes a
unix-socket caller by the peer credentials of the dialing process --
tailscaled itself, as root -- so the peer got a write-capable LocalAPI
and could change the node's settings.

The HTTP proxy path already refused this via isTailscaledSocket; the
TCP-forward path, added later, did not. Reject it at config-set time in
setServeConfigLocked so "tailscale serve" fails up front, and keep a
dial-site guard returning ErrProxyToTailscaledSocket as a backstop for
configs set by other means.

RELNOTE: tailscale serve no longer proxies to tailscaled's own socket

Fixes tailscale/corp#50425

Change-Id: I5ed02e83d32bdfb09c8164907bf38cabcc406169

Signed-off-by: Sam Jean <samj@tailscale.com>

2026-10-26 21:52:39 -03:00

..

auditlog

ipn/auditlog: store the audit log in the backend's state directory

2026-09-24 11:52:21 -07:00

conffile

ipn/conffile: reject null services and endpoints in Services config files (#21647)

2026-10-05 12:29:40 -07:00

desktop

ipn/desktop: skip the extension when sessions can't be enumerated

2026-09-24 11:51:51 -07:00

ipnauth

ipnauth: set isUnixSock in the ts_omit_unixsocketidentity GetConnIdentity

2026-07-31 17:30:11 -07:00

ipnext

ipn/ipnext: add NodeBackend.NodeBy{Addr,ID}

2026-10-16 12:45:54 -04:00

ipnlocal

ipn/ipnlocal: refuse serving TCP to the tailscaled socket (#21966)

2026-10-26 21:52:39 -03:00

ipnserver

envknob: add SetenvForTest helper for safe environment variable handling

2026-08-19 12:22:26 +01:00

ipnstate

types/key: rename NLPublic/Private to TLPublic/Private

2026-10-02 16:03:51 +01:00

lapitest

ipn/ipnlocal: consolidate test-only LocalBackend methods behind ForTest

2026-06-27 16:11:42 -07:00

localapi

ipn/localapi: use caller scope for syspolicy requests (#21701)

2026-10-08 08:35:14 -07:00

policy

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

store

feature: add TS_DISABLE_FEATURE to disable features at runtime

2026-09-15 08:37:47 -07:00

backend_test.go

ipn, ipn/ipnlocal: remove Notify.NetMap, size initial status to subscription

2026-09-14 09:37:30 -07:00

backend.go

ipn, ipn/local: expose hidden device gui gui_visibility (#21822)

2026-10-23 11:45:38 -07:00

conf_test.go

ipn/conf: support RemoteConfig in the config file

2026-07-14 10:29:19 +02:00

conf.go

ipn/conf: support RemoteConfig in the config file

2026-07-14 10:29:19 +02:00

doc.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

ipn_clone.go

tailcfg,tailcfg/{nodecap,selfcap}: split capability constants to their own packages (#20639)

2026-08-07 16:30:35 -07:00

ipn_test.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

ipn_view.go

wgengine/router/osrouter: add native FreeBSD routing, no-snat support

2026-08-31 20:31:01 -07:00

prefs_test.go

cmd/tailscale, ipn, feature/remoteconfig: add remote-config support

2026-07-07 12:10:34 -07:00

prefs.go

feature/exitnodehealth: warn when selected exit nodes are unavailable (#21017)

2026-10-01 08:57:20 -04:00

serve_expand_test.go

ipn/ipnlocal,cmd/tailscale/cli: support unix socket targets for TCP serve

2026-07-16 09:13:38 -06:00

serve_test.go

cmd/tailscale: allow IPv6 localhost serve targets

2026-08-31 14:25:58 -07:00

serve.go

cmd/tailscale: allow IPv6 localhost serve targets

2026-08-31 14:25:58 -07:00

store_test.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

store.go

ipn/store: make WriteState(id, nil) delete key instead of adding nil entry (#19920)

2026-05-29 11:22:14 -07:00