6
** [#A] Free plugin name and args
7
[[file:plugin-runner.c::free%20plugin_list][file:plugin-runner.c::free plugin_list]] (both places)
8
** [#A] Change syntax for arguments
6
9
** [#B] Add more comments to code
7
10
** [#B] Add more if(debug) calls
8
11
** [#B] Seperate more code to function for more readability
12
** [#B] Make free_plugin_list() function
9
13
** [#A] Man page: man8/plugin-runner.8mandos
15
Describe the plus sign syntax for passing options from crypttab
13
19
Examples of normal usage, debug usage, debugging single or all
20
plugins, examples of crypttab lines with plus syntax, etc.
22
Explaining text on what you can read
30
Explaining test on what you can read
23
31
** Keydir move: /etc/mandos -> /etc/keys/mandos
24
32
Must create in preinst if not pre-depending on cryptsetup
60
70
** [#A] Man page: man8/password-prompt.8mandos
71
** Show getenv("cryptsource") and getenv("crypttarget") if set
72
cryptsource will be the device, like "/dev/sda3", and crypttarget
73
will be the device mapper name, like "sda3_crypt".
62
75
Move options to new OPTIONS section.
63
Note that this is more or less a simple getpass(3) wrapper, even
64
though actual use of getpass(3) is not guaranteed.
66
77
Create this section
72
83
Create this section
73
84
Not much to do here but it is noteworthy to state the danger of
74
85
not having a fallback option.
87
Note that this is more or less a simple getpass(3) wrapper, even
88
though actual use of getpass(3) is not guaranteed.
76
90
Create this section
81
95
does not. See also [[http://sources.redhat.com/ml/libc-alpha/2003-05/msg00251.html][Marcus Brinkmann: Re: getpass obsolete?]] and
82
96
[[http://article.gmane.org/gmane.comp.lib.glibc.alpha/4906][Petter Reinholdtsen: Re: getpass obsolete?]], and especially also
83
97
[[http://www.steve.org.uk/Reference/Unix/faq_4.html#SEC48][Unix Programming FAQ 3.1 How can I make my program not echo input?]]
98
** Replace completely with "/lib/cryptsetup/askpass"?
101
** [#A] Command man page: man8/mandos.8
103
Move options to new OPTIONS section
109
Describe briefly that the server gets global settings from
110
mandos.conf and clients from clients.conf, but refer to their man
111
pages for more details.
117
Create this section (if needed)
121
Refer to the client man page
86
122
** [#A] Config file man page: man5/mandos.conf (mandos.conf)
87
123
** [#A] Config file man page: man5/mandos-clients.conf (clients.conf)
88
124
** [#A] /etc/init.d/mandos-server :teddy:
89
** [#B] Log level :bugs:
90
126
** /etc/mandos/clients.d/*.conf
91
127
Watch this directory and add/remove/update clients?
92
128
** config for TXT record
93
** [#B] Run-time communication with server :bugs:
129
** Run-time communication with server
94
130
Probably using D-Bus
95
131
See also [[*Mandos-tools]]
96
** Implement --foreground :bugs:
132
** Implement --foreground
97
133
[[info:standards:Option%20Table][Table of Long Options]]
98
134
** Implement --socket
99
135
[[info:standards:Option%20Table][Table of Long Options]]
100
** Date+time on console log messages :bugs:
136
** Date+time on console log messages
101
137
Is this the default?
103
139
* Mandos-tools/utilities
147
*** DONE [#A] Change initrd.img file to not be publically readable
148
/usr/share/initramfs-tools/conf-hooks.d/mandos
111
150
*** Update initrd.img after installation
112
This seems to use some kind of "trigger" system
114
152
*** [#A] Create mandos user and group for server
115
153
*** [#A] Create /var/run/mandos directory with perm and ownership
118
156
*** [#A] Command man page: man8/mandos-keygen.8
124
157
*** [#A] Output cut-and-paste ready snippet for clients.conf.
127
160
** /usr/share/initramfs-tools/hooks/mandos
128
*** Do not install in initrd.img if configured not to.
161
*** Do not install in initrd.img if configured not to
129
162
Use "/etc/initramfs-tools/conf.d/mandos"? Definitely a debconf
131
164
** /etc/bash_completion.d/mandos
132
*** From XML sources directly?
165
*** From xml sources directly?