You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Aaron Klotz 9ebb5d4205 ipn, paths: ensure that the state directory for Windows has the correct perms ... ProgramData has a permissive ACL. For us to safely store machine-wide state information, we must set a more restrictive ACL on our state directory. We set the ACL so that only talescaled's user (ie, LocalSystem) and the Administrators group may access our directory. We must include Administrators to ensure that logs continue to be easily accessible; omitting that group would force users to use special tools to log in interactively as LocalSystem, which is not ideal. (Note that the ACL we apply matches the ACL that was used for LocalSystem's AppData\Local). There are two cases where we need to reset perms: One is during migration from the old location to the new. The second case is for clean installations where we are creating the file store for the first time. Updates #2856 Signed-off-by: Aaron Klotz <aaron@tailscale.com>		5 years ago
..
migrate.go	ipn, paths: ensure that the state directory for Windows has the correct perms	5 years ago
paths.go	ipn, paths: ensure that the state directory for Windows has the correct perms	5 years ago
paths_unix.go	ipn, paths: ensure that the state directory for Windows has the correct perms	5 years ago
paths_windows.go	ipn, paths: ensure that the state directory for Windows has the correct perms	5 years ago