Skip to content

ipn, cmd/tailscale/cli: add pref to configure sudo-free operator user - #1722

Merged
bradfitz merged 1 commit into
mainfrom
bradfitz/allow
Apr 19, 2021
Merged

ipn, cmd/tailscale/cli: add pref to configure sudo-free operator user#1722
bradfitz merged 1 commit into
mainfrom
bradfitz/allow

Conversation

@bradfitz

Copy link
Copy Markdown
Member

From discussion with @danderson.

Fixes #1684 (in a different way)

Comment thread ipn/prefs.go

// OperatorUser is the local machine user name who is allowed to
// operate tailscaled without being root or using sudo.
OperatorUser string `json:",omitempty"`

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Make []string? Would be nice to be able to grant tailscale use to multiple operators, maybe? Unsure.

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We could keep it simple now and support comma-delimited in the future if we want to add that later?

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Also, once we get to wanting to support multiple operators, that starts to sound like a group to me.

So I don't want to make this overly complicated for now. Let's address the common case (single user, single admin) and deal with the Enterprise Management Solutions(tm) later once needs are understood.

From discussion with @danderson.

Fixes #1684 (in a different way)

Signed-off-by: Brad Fitzpatrick <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

cmd/tailscale: remember SUDO_UID from "up", don't require sudo for future commands?

2 participants