/mandos/release

-*- org -*-

* mandos-client

** TODO [#B] use scandir(3) instead of readdir(3)

** TODO [#B] Prefix all debug output with argv[0]

** TODO [#B] Retry a server which has a non-definite reply:

*** A closed connection during the TLS handshake

*** A TCP timeout

** TODO [#B] Use capabilities instead of seteuid().

* splashy

** TODO [#A] Re-raise signal received when exiting due to handled signal  :test:

** TODO [#B] use scandir(3) instead of readdir(3)

** TODO [#B] Prefix all debug output with "Mandos plugin " + argv[0]

* usplash

** TODO [#A] Re-raise signal received when exiting due to handled signal.

** TODO [#B] use scandir(3) instead of readdir(3)

** TODO [#B] Prefix all debug output with "Mandos plugin " + argv[0]

* askpass-fifo

** TODO [#B] Prefix all debug output with "Mandos plugin " + argv[0]

** TODO [#B] Drop privileges after opening FIFO.

* password-prompt

** TODO [#B] Prefix all debug output with "Mandos plugin " + argv[0]

* plugin-runner

** TODO [#B] use scandir(3) instead of readdir(3)

** TODO [#C] use same file name rules as run-parts(8)

* mandos (server)

** TODO [#B] Log level				:BUGS:

** TODO /etc/mandos/clients.d/*.conf

   Watch this directory and add/remove/update clients?

** TODO config for TXT record

** TODO [#B] Run-time communication with server :BUGS:

   Probably using D-Bus

*** Client class

*** Main server

    + SetLogLevel

      syslogger.setLevel(logging.WARNING)

    + [[http://log.ometer.com/2007-05.html][Best D-Bus practices]]

** TODO Implement --foreground			:BUGS:

   [[info:standards:Option%20Table][Table of Long Options]]

** TODO Implement --socket

   [[info:standards:Option%20Table][Table of Long Options]]

** TODO Date+time on console log messages	:BUGS:

   Is this the default?

** TODO Split IPv6_TCPServer into a generic and Mandos-specific class

** TODO move handle_ipc out of IPv6_TCPServer

** TODO DBusServiceObjectUsingSuper

** Global enable/disable flag

** By-client countdown on secrets given

** Fix problem with fsck taking a really long time

   Whenever a client successfully gets a secret it could get a

   one-time timeout boost to allow for an fsck-incurred delay

* mandos.xml

** [[file:mandos.xml::XXX][Document D-Bus interface]]

* Provide and install /etc/dbus-1/system.d/mandos.conf

* mandos-ctl

*** Handle "no D-Bus server" and/or "no Mandos server found" better

*** [#B] --dump option

* mandos-name

** D-Bus mail loop w/ signal receiver

** Urwid/Newt client data displayer

*** Urwid scaffolding

*** Client Widgets

*** Properties popup

* mandos-keygen

** TODO Loop until passwords match when run interactively

** TODO "--secfile" option

   Using the "secfile" option instead of "secret"

** TODO [#B] "--test" option

   For testing decryption before rebooting.

* Package

** /usr/share/initramfs-tools/hooks/mandos

*** TODO [#C] use same file name rules as run-parts(8)

*** TODO [#C] Do not install in initrd.img if configured not to.

    Use "/etc/initramfs-tools/hooksconf.d/mandos"?

** TODO [#C] /etc/bash_completion.d/mandos

   From XML sources directly?

#+STARTUP: showall