/mandos/release

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/release

« back to all changes in this revision

Viewing changes to TODO

  • Committer: teddy at recompile
  • Date: 2020-02-08 14:01:38 UTC
  • mto: This revision was merged to the branch mainline in revision 396.
  • Revision ID: teddy@recompile.se-20200208140138-h3ett0amdelfpt90
mandos: If possible, use shlex.quote() instead of re.escape()

* mandos: Make sure shlex.quote() exists (falling back to assigning
  re.escape to it).
  (Client.start_checker): Use shlex.quote() instead of re.escape().

Show diffs side-by-side

added added

removed removed

Lines of Context:
TODO
14
14
** TODO [#C] Make start_mandos_communication() take "struct server".
15
15
** TODO [#C] --interfaces=regex,eth*,noregex (bridge-utils-interfaces(5))
16
16
** TODO [#A] Detect partial writes to stdout and exit with EX_TEMPFAIL
 
17
** TODO [#B] Use reallocarray() with GNU LibC 2.29 or later.
17
18
 
18
19
* splashy
19
20
** TODO [#B] use scandir(3) instead of readdir(3)
33
34
 
34
35
* plymouth
35
36
** TODO [#A] Detect partial writes to stdout and exit with EX_TEMPFAIL
 
37
** TODO [#B] Use reallocarray() with GNU LibC 2.29 or later.
36
38
 
37
39
* TODO [#B] passdev
38
40
 
80
82
** TODO Error handling on error parsing config files
81
83
** TODO init.d script error handling
82
84
** TODO D-Bus server properties; address, port, interface, etc.           :2:
83
 
** Python 3                                                               :2:
84
 
*** TODO [#C] In Python 3.3, use shlex.quote() instead of re.escape()
85
85
 
86
86
* mandos-ctl
87
 
*** Handle "no D-Bus server" and/or "no Mandos server found" better
88
87
** TODO Remove old string_to_delta format                                 :2:
89
88
 
90
89
* TODO mandos-dispatch
119
118
 
120
119
* [[http://www.undeadly.org/cgi?action=article&sid=20110530221728][OpenBSD]]
121
120
 
122
 
* TODO Use raw public keys (RFC 7250) for TLS communications              :2:
123
 
** Support for this is planned for GnuTLS version 3.6
124
 
   https://gitlab.com/gnutls/gnutls/issues/26
125
 
** Rationale
126
 
*** The client key is used both for communication and encryption
127
 
    Using raw keys in GnuTLS instead uses separate keys for
128
 
    communication and password decryption.
129
 
*** GnuTLS 3.5.9 has deprecated the OpenPGP functions
130
 
    The functions are still available, but deprecated:
131
 
    https://gitlab.com/gnutls/gnutls/issues/102
132
 
 
133
121
 
134
122
#+STARTUP: showall