headscale

public/headscale

0 Fork 0

mirror of https://github.com/juanfont/headscale.git synced 2026-11-05 04:59:26 +09:00

Commit Graph

Author	SHA1	Message	Date
Kristoffer Dalby	674c52523b	policy/v2: recapture SSH data captures Every ssh_results row captured again from SaaS. SaaS now maps login "0" to no local user in rules that map root, quotes a refused checkPeriod as written and rewords its tailnet-domain refusal.	2026-10-27 21:31:36 +00:00
Kristoffer Dalby	d600090f2c	policy/v2: align SSH rule validation with Tailscale Trim whitespace on action, users, src, dst; reject empty/wildcard users; reject empty acceptEnv; reject negative and over-max checkPeriod; reject hosts-table aliases as SSH dst; reject non-ASCII tag names; tolerate tag-owner cycles; match group-nesting wording.	2026-05-13 21:10:13 +02:00

Author

SHA1

Message

Date

Kristoffer Dalby

674c52523b

policy/v2: recapture SSH data captures

Every ssh_results row captured again from SaaS. SaaS now maps login "0"
to no local user in rules that map root, quotes a refused checkPeriod as
written and rewords its tailnet-domain refusal.

2026-10-27 21:31:36 +00:00

Kristoffer Dalby

d600090f2c

policy/v2: align SSH rule validation with Tailscale

Trim whitespace on action, users, src, dst; reject empty/wildcard users; reject empty acceptEnv; reject negative and over-max checkPeriod; reject hosts-table aliases as SSH dst; reject non-ASCII tag names; tolerate tag-owner cycles; match group-nesting wording.

2026-05-13 21:10:13 +02:00