2
configuration for OpenPGP key dir
3
header files/symbols tally
4
check exit codes of all system calls
6
protocol version header
7
use strsep instead of strtok?
10
disable certain plugins
11
header files/symbols tally
12
check exit codes of all system calls
13
change uid to nobody:nogroup
14
other drop privs stuff?
15
pass things in environment, like device name, etc
16
Does cryptsetup already do this?
17
Configurable plugin dir
18
use strsep instead of strtok?
23
protocol version header
24
Run-time communication with server
27
[Mandos-tools/utilities]
4
** TODO [#C] IPv4 support
7
** TODO [#B] use scandir(3) instead of readdir(3)
10
** TODO [#B] Log level :bugs:
11
** TODO /etc/mandos/clients.d/*.conf
12
Watch this directory and add/remove/update clients?
13
** TODO config for TXT record
14
** TODO [#B] Run-time communication with server :bugs:
16
See also [[*Mandos-tools]]
20
syslogger.setLevel(logging.WARNING)
22
+ [[http://log.ometer.com/2007-05.html][Best D-Bus practices]]
23
** TODO Implement --foreground :bugs:
24
[[info:standards:Option%20Table][Table of Long Options]]
25
** TODO Implement --socket
26
[[info:standards:Option%20Table][Table of Long Options]]
27
** TODO Date+time on console log messages :bugs:
29
** TODO delete hook when clients fall out by timeout
30
This will not be strictly necessary when the D-Bus interface is
34
** [[file:mandos.xml::XXX][Document D-Bus interface]]
36
* Provide and install /etc/dbus-1/system.d/mandos.conf
39
*** Handle "no D-Bus server" and/or "no Mandos server found" better
40
*** [#B] --dump option
45
** TODO Loop until passwords match when run interactively
46
** TODO "--secfile" option
47
Using the "secfile" option instead of "secret"
48
** TODO [#B] "--test" option
49
For testing decryption before rebooting.
52
** /usr/share/initramfs-tools/hooks/mandos
53
*** TODO [#C] Do not install in initrd.img if configured not to.
54
Use "/etc/initramfs-tools/conf.d/mandos"? Definitely a debconf
56
** TODO [#C] /etc/bash_completion.d/mandos
57
From XML sources directly?
58
** TODO initramfs-tools-script :test:
59
Do not insert plugin-runner as keyscript if a kernel parameter
60
"mandos=off" is passed.