Matt RichardsonandClaude Fable 5.1 c5c826d163 Warn when the info API's windows pipe is outside the protected namespace ...

A program reading the info API opens the pipe by name and has no owner
check of its own, so for a name any local user could create first,
whoever did would be answering its queries. nebula refuses to serve a
held name and logs it, but the program cannot tell. The daemon now warns
at bind when the configured name is not under
\\.\pipe\ProtectedPrefix\Administrators\, and the example config and
CHANGELOG say to put it there.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

2026-10-21 12:27:12 -04:00

..

access_unix_test.go

Follow the localapi fold on the info API's side

2026-10-21 12:27:12 -04:00

access_windows_test.go

Warn when the info API's windows pipe is outside the protected namespace

2026-10-21 12:27:12 -04:00

access.go

Add a local control socket and nebula ctl (#1975)

2026-10-21 11:16:00 -04:00

chmod_bsd.go

Add the identity command and serve it on an opt-in HTTP info API

2026-10-21 12:26:09 -04:00

chmod_linux.go

Add the identity command and serve it on an opt-in HTTP info API

2026-10-21 12:26:09 -04:00

client.go

Add a local control socket and nebula ctl (#1975)

2026-10-21 11:16:00 -04:00

endpoint.go

Shorten rebindLocked's header

2026-10-21 12:27:12 -04:00

group_unix.go

Add a local control socket and nebula ctl (#1975)

2026-10-21 11:16:00 -04:00

group_windows.go

Add a local control socket and nebula ctl (#1975)

2026-10-21 11:16:00 -04:00

info_test.go

Drop the info API tests that tested the control socket's code twice

2026-10-21 12:26:57 -04:00

info_windows_test.go

Follow the localapi fold on the info API's side

2026-10-21 12:27:12 -04:00

info.go

Warn when the info API's windows pipe is outside the protected namespace

2026-10-21 12:27:12 -04:00

path_test.go

Add a local control socket and nebula ctl (#1975)

2026-10-21 11:16:00 -04:00

path.go

Add a local control socket and nebula ctl (#1975)

2026-10-21 11:16:00 -04:00

peercred_bsd.go

Add a local control socket and nebula ctl (#1975)

2026-10-21 11:16:00 -04:00

peercred_linux.go

Add a local control socket and nebula ctl (#1975)

2026-10-21 11:16:00 -04:00

peercred_netbsd.go

Add a local control socket and nebula ctl (#1975)

2026-10-21 11:16:00 -04:00

peercred_openbsd.go

Add a local control socket and nebula ctl (#1975)

2026-10-21 11:16:00 -04:00

peercred_windows.go

Add a local control socket and nebula ctl (#1975)

2026-10-21 11:16:00 -04:00

platform_unix_test.go

Add the identity command and serve it on an opt-in HTTP info API

2026-10-21 12:26:09 -04:00

platform_unix.go

Warn when the info API's windows pipe is outside the protected namespace

2026-10-21 12:27:12 -04:00

platform_windows_test.go

Add a local control socket and nebula ctl (#1975)

2026-10-21 11:16:00 -04:00

platform_windows.go

Warn when the info API's windows pipe is outside the protected namespace

2026-10-21 12:27:12 -04:00

protocol_test.go

Add a local control socket and nebula ctl (#1975)

2026-10-21 11:16:00 -04:00

protocol.go

Add the identity command and serve it on an opt-in HTTP info API

2026-10-21 12:26:09 -04:00

server_test.go

Add the identity command and serve it on an opt-in HTTP info API

2026-10-21 12:26:09 -04:00

server.go

Add the identity command and serve it on an opt-in HTTP info API

2026-10-21 12:26:09 -04:00

wire_test.go

Add the identity command and serve it on an opt-in HTTP info API

2026-10-21 12:26:09 -04:00

wire.go

Drop the flag that said the info API was not served on windows

2026-10-21 12:26:57 -04:00