Re: Progress on tailscale on NetBSD (plus $ available)

[Kevin Bloom <ktnb%netbsd.org@localhost>]

> Sent with Proton Mail secure email.
>
> On Wednesday, 22 April 2026 at 8:55 PM, Kevin Bloom <ktnb%netbsd.org@localhost> wrote=
> :
>
> > > Sent with Proton Mail secure email.
> > >
> > > On Wednesday, 22 April 2026 at 3:16 AM, Kevin Bloom <ktnb%netbsd.org@localhost> w=
> rote=3D
> ...
> > > FWIW,
> > >
> > > Chavdar
> > >
> >=20
> > I've committed another update that fixes the unprivileged user issue, the
> > pining of loopback issue, and the health check error (not sure if anyone
> > saw that one or not). Please give it a go and let me know how it works!
> >=20
>
> Wow, that was quick! It seems everything works at first look.=20
>
> There is a question mark on ssh, though - it now lets me to ssh to root@any=
> -ov-my-tailnet-hosts from any of the local NetBSD users *without* requestin=
> g the usual reauthentication. This seems like a security issue...=20
>
> Chavdar=20
>
>

I believe that's how tailscale works. Basically, tailscale will log
who does what and you can control who has actual access via the
--operator option. I think anyone can run the status and ip commands,
however. (I could be wrong but that's what I'm understanding)