tailscale/util
Aaron Klotz d7962e3bcf ipn/ipnserver, util/winutil: update workaround for os/user.LookupId failures on Windows to reject SIDs from deleted/invalid security principals.
Our current workaround made the user check too lax, thus allowing deleted
users. This patch adds a helper function to winutil that checks that the
uid's SID represents a valid Windows security principal.

Now if `lookupUserFromID` determines that the SID is invalid, we simply
propagate the error.

Updates https://github.com/tailscale/tailscale/issues/869

Signed-off-by: Aaron Klotz <aaron@tailscale.com>
2022-02-02 15:01:28 -07:00
..
cibuild wgengine/magicsock: increase legacy ping timeout again 2021-02-10 13:50:18 -08:00
clientmetric util/clientmetric: add tests omitted from earlier commit 2021-11-22 21:49:28 -08:00
cmpver util/cmpver: move into OSS from corp repo. 2021-04-23 20:55:45 -07:00
codegen util/codegen: reorder AssertStructUnchanged args 2021-09-17 16:46:08 -07:00
deephash all: gofmt -w -s (simplify) tests 2021-12-15 08:43:41 -08:00
dnsname util/dnsname: make ToFQDN take exactly 0 or 1 allocs for everything. 2021-05-31 21:13:50 -07:00
endian all: gofmt with Go 1.17 2021-08-05 15:54:00 -07:00
groupmember util/groupmember: adjust build tags for osusergo 2021-10-05 15:38:57 -07:00
jsonutil util/jsonutil: new package 2020-11-19 13:58:35 -08:00
lineread util/lineread: add docs to Reader 2020-11-19 12:14:58 -08:00
multierr util/multierr: new package 2021-11-02 17:50:15 -07:00
osshare all: gofmt with Go 1.17 2021-08-05 15:54:00 -07:00
pidowner all: gofmt with Go 1.17 2021-08-05 15:54:00 -07:00
racebuild all: gofmt with Go 1.17 2021-08-05 15:54:00 -07:00
systemd all: gofmt with Go 1.17 2021-08-05 15:54:00 -07:00
uniq util/uniq: add new package 2020-10-02 11:00:56 -07:00
winutil ipn/ipnserver, util/winutil: update workaround for os/user.LookupId failures on Windows to reject SIDs from deleted/invalid security principals. 2022-02-02 15:01:28 -07:00