Brendan CreaneandGitHub c1edf7f458 wgengine/router/osrouter: sanitize interfaceV6UsableForTun path with os.OpenInRoot (#20505) ...

interfaceV6UsableForTun interpolates the interface name into a /proc path.
A plain filepath.Join + os.Open only cleans the path, so a tunname with
".." (or a symlinked component) could read outside /proc/sys/net/ipv6/conf.
Open under that fixed directory with os.OpenInRoot, which rejects any path
escaping the root (openat-based, so also TOCTOU-resistant), still using
filepath.Join to build the relative name. See https://go.dev/blog/osroot.

Updates #20447

Signed-off-by: Brendan Creane <bcreane@gmail.com>

2026-07-17 10:17:06 -07:00

..

osrouter

wgengine/router/osrouter: sanitize interfaceV6UsableForTun path with os.OpenInRoot (#20505)

2026-07-17 10:17:06 -07:00

callback.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

consolidating_router_test.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

consolidating_router.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

router_fake.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

router_test.go

util/linuxfw,wgengine/router: allow incoming CGNAT range traffic with nodeattr

2026-04-14 16:45:06 -04:00

router.go

util/linuxfw,wgengine/router: allow incoming CGNAT range traffic with nodeattr

2026-04-14 16:45:06 -04:00