7
** [#A] check exit codes of all system calls
8
** [#B] header files/symbols tally
10
** use strsep instead of strtok?
11
** Do not depend on GPG key rings on disk
12
This would mean creating new GPG key rings with GPGME by importing
13
the key files from scratch every time we start the program.
20
** [#A] check exit codes of all system calls
21
** [#B] header files/symbols tally
22
** use strsep instead of strtok?
23
** use config file in addition to arguments
24
** pass things in environment, like device name, etc
28
** [#A] write PID file
29
** [#A] /etc/init.d/mandos-server
31
** /etc/mandos/clients.d/*.conf
4
** TODO [#A] Clean up /tmp directory on signal
5
** TODO [#B] Temporarily lower kernel log level
6
for less printouts during sucessfull boot.
7
klogctl(6, NULL, 0); klogctl(7, NULL, 0);
8
** TODO [#C] IPv4 support
11
** TODO [#B] use scandir(3) instead of readdir(3)
14
** TODO [#B] Log level :bugs:
15
** TODO /etc/mandos/clients.d/*.conf
32
16
Watch this directory and add/remove/update clients?
33
** config for TXT record
34
** Run-time communication with server
37
* Mandos-tools/utilities
38
All of this probably using D-Bus
44
** Change initrd.img file to not be publically readable
45
** Create GPG key ring files in initrd
17
** TODO config for TXT record
18
** TODO [#B] Run-time communication with server :bugs:
20
See also [[*Mandos-tools]]
24
syslogger.setLevel(logging.WARNING)
26
+ [[http://log.ometer.com/2007-05.html][Best D-Bus practices]]
27
** TODO Implement --foreground :bugs:
28
[[info:standards:Option%20Table][Table of Long Options]]
29
** TODO Implement --socket
30
[[info:standards:Option%20Table][Table of Long Options]]
31
** TODO Date+time on console log messages :bugs:
33
** TODO delete hook when clients fall out by timeout
34
This will not be strictly necessary when the D-Bus interface is
38
** [[file:mandos.xml::XXX][Document D-Bus interface]]
40
* Provide and install /etc/dbus-1/system.d/mandos.conf
43
*** Handle "no D-Bus server" and/or "no Mandos server found" better
44
*** [#B] --dump option
45
** TODO Disable client
52
** TODO "--secfile" option
53
Using the "secfile" option instead of "secret"
54
** TODO [#B] "--test" option
55
For testing decryption before rebooting.
58
** /usr/share/initramfs-tools/hooks/mandos
59
*** TODO [#C] Do not install in initrd.img if configured not to.
60
Use "/etc/initramfs-tools/conf.d/mandos"? Definitely a debconf
62
** TODO [#C] /etc/bash_completion.d/mandos
63
From XML sources directly?