tunneld: use custom flags (--acl[-file]) to specify server permissions

The v23.permissions flag is somewhat perplexing. We should just use it
for the debug authorizer (in theory, it supports labels other than
runtime:, but it's not clear if that works unless the securityflag
package is the only 'client').

This change adds a new --acl and --acl-file flag for specifying
permissions for the tunnel server.

Change-Id: I9ac7af8272367c0c010b863f51ab244a45b22697
2 files changed
tree: 6143532b123840d2b9a3d2f7532aec670c83153d
  1. cmd/
  2. examples/
  3. internal/
  4. lib/
  5. runtime/
  6. services/
  7. test/
  8. .gitignore
  9. AUTHORS
  10. CONTRIBUTING.md
  11. CONTRIBUTORS
  12. envvar.go
  13. envvar_test.go
  14. LICENSE
  15. PATENTS
  16. README.md
  17. VERSION
README.md

Vanadium

This repository contains a reference implementation of the Vanadium APIs.

Unlike the APIs in https://github.com/vanadium/go.v23, which promises to provide backward compatibility this repository makes no such promises.