/mandos/release

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/release
36 by Teddy Hogeborn
* TODO: Converted to org-mode style
1
-*- org -*-
2
54 by Teddy Hogeborn
Merge.
3
* [#A] README file
44 by Teddy Hogeborn
* ca.pem: Removed.
4
24.1.52 by Björn Påhlsson
merge + minor adjustments
5
* Plugin-runner
78 by Teddy Hogeborn
Add feature to specify custom environment variables for plugins.
6
** [#A] Free plugin name and args
7
   [[file:plugin-runner.c::free%20plugin_list][file:plugin-runner.c::free plugin_list]] (both places)
67 by Teddy Hogeborn
* mandos-keygen: New program to generate new client keys on
8
** [#A] Change syntax for arguments
24.1.52 by Björn Påhlsson
merge + minor adjustments
9
** [#B] Add more comments to code
10
** [#B] Add more if(debug) calls
11
** [#B] Seperate more code to function for more readability
78 by Teddy Hogeborn
Add feature to specify custom environment variables for plugins.
12
** [#B] Make free_plugin_list() function
24.1.52 by Björn Påhlsson
merge + minor adjustments
13
** [#A] Man page: man8/plugin-runner.8mandos
24.1.41 by Björn Påhlsson
updated mandos-client sections and added see also stuff
14
*** DESCRIPTION
55 by Teddy Hogeborn
* TODO: More notes.
15
    Describe the plus sign syntax for passing options from crypttab
24.1.41 by Björn Påhlsson
updated mandos-client sections and added see also stuff
16
*** EXIT STATUS
17
    Text needed
55 by Teddy Hogeborn
* TODO: More notes.
18
*** EXAMPLES
19
    Examples of normal usage, debug usage, debugging single or all
20
    plugins, examples of crypttab lines with plus syntax, etc.
21
*** FILES
24.1.41 by Björn Påhlsson
updated mandos-client sections and added see also stuff
22
    Text needed
55 by Teddy Hogeborn
* TODO: More notes.
23
*** SECURITY
24.1.41 by Björn Påhlsson
updated mandos-client sections and added see also stuff
24
    Text needed
55 by Teddy Hogeborn
* TODO: More notes.
25
*** NOTES
24.1.41 by Björn Påhlsson
updated mandos-client sections and added see also stuff
26
    Text needed
55 by Teddy Hogeborn
* TODO: More notes.
27
*** BUGS
24.1.41 by Björn Påhlsson
updated mandos-client sections and added see also stuff
28
    Text needed
55 by Teddy Hogeborn
* TODO: More notes.
29
*** SEE ALSO
24.1.41 by Björn Påhlsson
updated mandos-client sections and added see also stuff
30
    Explaining test on what you can read
24.1.52 by Björn Påhlsson
merge + minor adjustments
31
** Support in configuration file for environment variables
74 by Teddy Hogeborn
* Makefile (PREFIX, CONFDIR): New.
32
** Keydir move: /etc/mandos -> /etc/keys/mandos
33
   Must create in preinst if not pre-depending on cryptsetup
47 by Teddy Hogeborn
* plugbasedclient.c: Renamed to "mandos-client.c". All users changed.
34
35
* Password-request
36
** [#A] Man page: man8/password-request.8mandos
78 by Teddy Hogeborn
Add feature to specify custom environment variables for plugins.
37
** Make prompt exactly like the normal prompt
38
   Use environment variables:
39
   "Enter passphrase to unlock the disk $cryptsource ($crypttarget): "
40
   [[file:plugins.d/password-prompt.c::fprintf%20stderr%20s%20Password%20prefix][Here]]
24.1.46 by Björn Påhlsson
mandos-client
41
** [#B] Temporarily lower kernel log level
42
   for less printouts during sucessfull boot.
55 by Teddy Hogeborn
* TODO: More notes.
43
*** DESCRIPTION
44
    Move options to new OPTIONS section.
45
    State that this command is not meant to be invoked directly, but
46
    is run as a plugin from mandos-client(8) and only run in the
47
    initrd environment, not the real system.
48
*** EXIT STATUS
49
    Create this section
50
*** EXAMPLES
51
    Examples of normal usage, debug usage, debugging by connecting
52
    directly, etc.
53
*** FILES
54
    Describe the key files and the key ring files.  Also note that
55
    they should normally have been automatically created.
56
*** DIAGNOSTICS
57
    Create this section
58
*** SECURITY
59
    Create this section
60
*** NOTES
61
    Create this section (if needed)
62
*** BUGS
63
    Create this section
64
*** SEE ALSO
65
    Refer to mandos-client(8mandos) and password-prompt(8mandos)
44 by Teddy Hogeborn
* ca.pem: Removed.
66
** IPv4 support
36 by Teddy Hogeborn
* TODO: Converted to org-mode style
67
** use strsep instead of strtok?
73 by Teddy Hogeborn
* Makefile (COVERAGE): Change back to "--coverage".
68
** Do not depend on GnuPG key rings on disk
69
   This would mean creating new GnuPG key rings with GPGME by
70
   importing the key files from scratch on every program start.
47 by Teddy Hogeborn
* plugbasedclient.c: Renamed to "mandos-client.c". All users changed.
71
72
* Password-prompt
73
** [#A] Man page: man8/password-prompt.8mandos
74 by Teddy Hogeborn
* Makefile (PREFIX, CONFDIR): New.
74
** Show getenv("cryptsource") and getenv("crypttarget") if set
75
   cryptsource will be the device, like "/dev/sda3", and crypttarget
76
   will be the device mapper name, like "sda3_crypt".
55 by Teddy Hogeborn
* TODO: More notes.
77
*** DESCRIPTION
78
    Move options to new OPTIONS section.
79
*** EXIT STATUS
80
    Create this section
81
*** EXAMPLES
82
    Examples of normal usage, debug usage, with a prefix, etc.
83
*** DIAGNOSTICS
84
    Create this section
85
*** SECURITY
86
    Create this section
87
    Not much to do here but it is noteworthy to state the danger of
88
    not having a fallback option.
89
*** NOTES
90
    Note that this is more or less a simple getpass(3) wrapper, even
91
    though actual use of getpass(3) is not guaranteed.
92
*** BUGS
93
    Create this section
94
*** SEE ALSO
95
    Refer to mandos-client(8mandos) and password-request(8mandos)
47 by Teddy Hogeborn
* plugbasedclient.c: Renamed to "mandos-client.c". All users changed.
96
** Use getpass(3)?
53 by Teddy Hogeborn
Merge.
97
   Man page says "obsolete", but [[info:libc:getpass][GNU LibC Manual: Reading Passwords]]
98
   does not.  See also [[http://sources.redhat.com/ml/libc-alpha/2003-05/msg00251.html][Marcus Brinkmann: Re: getpass obsolete?]] and
99
   [[http://article.gmane.org/gmane.comp.lib.glibc.alpha/4906][Petter Reinholdtsen: Re: getpass obsolete?]], and especially also
100
   [[http://www.steve.org.uk/Reference/Unix/faq_4.html#SEC48][Unix Programming FAQ 3.1 How can I make my program not echo input?]]
64 by Teddy Hogeborn
* mandos-client.c (print_out_password): Strip trailing '\n'.
101
** Replace completely with "/lib/cryptsetup/askpass"?
36 by Teddy Hogeborn
* TODO: Converted to org-mode style
102
55 by Teddy Hogeborn
* TODO: More notes.
103
* Mandos (server)
47 by Teddy Hogeborn
* plugbasedclient.c: Renamed to "mandos-client.c". All users changed.
104
** [#A] Command man page: man8/mandos.8
55 by Teddy Hogeborn
* TODO: More notes.
105
*** DESCRIPTION
106
    Move options to new OPTIONS section
107
*** EXIT STATUS
108
    Create this section
109
*** EXAMPLES
110
    Create this section
111
*** FILES
112
    Describe briefly that the server gets global settings from
113
    mandos.conf and clients from clients.conf, but refer to their man
114
    pages for more details.
115
*** DIAGNOSTICS
116
    Create this section
117
*** SECURITY
118
    Create this section
119
*** NOTES
120
    Create this section (if needed)
121
*** BUGS
122
    Create this section
123
*** SEE ALSO
124
    Refer to the client man page
47 by Teddy Hogeborn
* plugbasedclient.c: Renamed to "mandos-client.c". All users changed.
125
** [#A] Config file man page: man5/mandos.conf (mandos.conf)
126
** [#A] Config file man page: man5/mandos-clients.conf (clients.conf)
53 by Teddy Hogeborn
Merge.
127
** [#A] /etc/init.d/mandos-server		:teddy:
44 by Teddy Hogeborn
* ca.pem: Removed.
128
** Log level
129
** /etc/mandos/clients.d/*.conf
130
   Watch this directory and add/remove/update clients?
131
** config for TXT record
36 by Teddy Hogeborn
* TODO: Converted to org-mode style
132
** Run-time communication with server
53 by Teddy Hogeborn
Merge.
133
   Probably using D-Bus
134
   See also [[*Mandos-tools]]
47 by Teddy Hogeborn
* plugbasedclient.c: Renamed to "mandos-client.c". All users changed.
135
** Implement --foreground
136
   [[info:standards:Option%20Table][Table of Long Options]]
137
** Implement --socket
138
   [[info:standards:Option%20Table][Table of Long Options]]
64 by Teddy Hogeborn
* mandos-client.c (print_out_password): Strip trailing '\n'.
139
** Date+time on console log messages
140
   Is this the default?
36 by Teddy Hogeborn
* TODO: Converted to org-mode style
141
142
* Mandos-tools/utilities
143
  All of this probably using D-Bus
144
** List clients
53 by Teddy Hogeborn
Merge.
145
** Disable client
36 by Teddy Hogeborn
* TODO: Converted to org-mode style
146
** Enable client
147
148
* Installer
67 by Teddy Hogeborn
* mandos-keygen: New program to generate new client keys on
149
** Client
150
*** DONE [#A] Change initrd.img file to not be publically readable
151
    /usr/share/initramfs-tools/conf-hooks.d/mandos
152
    UMASK=027
153
*** Update initrd.img after installation
154
** Server
155
*** [#A] Create mandos user and group for server
156
*** [#A] Create /var/run/mandos directory with perm and ownership
157
158
** mandos-keygen
159
*** [#A] Command man page: man8/mandos-keygen.8
160
*** [#A] Output cut-and-paste ready snippet for clients.conf.
36 by Teddy Hogeborn
* TODO: Converted to org-mode style
161
57 by Teddy Hogeborn
* mandos (version): New variable.
162
* [#A] Package
67 by Teddy Hogeborn
* mandos-keygen: New program to generate new client keys on
163
** /usr/share/initramfs-tools/hooks/mandos
164
*** Do not install in initrd.img if configured not to
165
    Use "/etc/initramfs-tools/conf.d/mandos"?  Definitely a debconf
166
    question.
55 by Teddy Hogeborn
* TODO: More notes.
167
** /etc/bash_completion.d/mandos
67 by Teddy Hogeborn
* mandos-keygen: New program to generate new client keys on
168
*** From xml sources directly?
61 by Teddy Hogeborn
* mandos (console): Define handler globally.
169
** unperish
170
** bzr-builddeb
55 by Teddy Hogeborn
* TODO: More notes.
171
24.1.30 by Björn Påhlsson
Added more stuff to do
172
* INSTALL file
173
56 by Teddy Hogeborn
Resolving merge commit.
174
* Web site
24.1.30 by Björn Påhlsson
Added more stuff to do
175
176
* Mailing list
177
178
* Announce project on news
56 by Teddy Hogeborn
Resolving merge commit.
179
  [[news:comp.os.linux.announce]]
24.1.30 by Björn Påhlsson
Added more stuff to do
180
36 by Teddy Hogeborn
* TODO: Converted to org-mode style
181

182
#+STARTUP: showall