bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
|
36
by Teddy Hogeborn
* TODO: Converted to org-mode style |
1 |
-*- org -*- |
2 |
||
|
54
by Teddy Hogeborn
Merge. |
3 |
* [#A] README file |
|
44
by Teddy Hogeborn
* ca.pem: Removed. |
4 |
|
|
54
by Teddy Hogeborn
Merge. |
5 |
* [#A] COPYING file |
|
47
by Teddy Hogeborn
* plugbasedclient.c: Renamed to "mandos-client.c". All users changed. |
6 |
[[file:/usr/share/common-licenses/GPL-3][GPLv3]] |
7 |
||
8 |
* Mandos-client |
|
|
24.1.44
by Björn Påhlsson
Fixed unkown -> unknown |
9 |
** [#A] Change syntaxt for arguments |
|
47
by Teddy Hogeborn
* plugbasedclient.c: Renamed to "mandos-client.c". All users changed. |
10 |
** [#A] Man page: man8/mandos-client.8mandos |
|
24.1.41
by Björn Påhlsson
updated mandos-client sections and added see also stuff |
11 |
*** DESCRIPTION |
|
55
by Teddy Hogeborn
* TODO: More notes. |
12 |
Describe the plus sign syntax for passing options from crypttab |
|
24.1.41
by Björn Påhlsson
updated mandos-client sections and added see also stuff |
13 |
*** EXIT STATUS |
14 |
Text needed |
|
|
55
by Teddy Hogeborn
* TODO: More notes. |
15 |
*** EXAMPLES |
16 |
Examples of normal usage, debug usage, debugging single or all |
|
17 |
plugins, examples of crypttab lines with plus syntax, etc. |
|
18 |
*** FILES |
|
|
24.1.41
by Björn Påhlsson
updated mandos-client sections and added see also stuff |
19 |
Text needed |
|
55
by Teddy Hogeborn
* TODO: More notes. |
20 |
*** SECURITY |
|
24.1.41
by Björn Påhlsson
updated mandos-client sections and added see also stuff |
21 |
Text needed |
|
55
by Teddy Hogeborn
* TODO: More notes. |
22 |
*** NOTES |
|
24.1.41
by Björn Påhlsson
updated mandos-client sections and added see also stuff |
23 |
Text needed |
|
55
by Teddy Hogeborn
* TODO: More notes. |
24 |
*** BUGS |
|
24.1.41
by Björn Påhlsson
updated mandos-client sections and added see also stuff |
25 |
Text needed |
|
55
by Teddy Hogeborn
* TODO: More notes. |
26 |
*** SEE ALSO |
|
24.1.41
by Björn Påhlsson
updated mandos-client sections and added see also stuff |
27 |
Explaining test on what you can read |
|
24.1.44
by Björn Påhlsson
Fixed unkown -> unknown |
28 |
** [#A] Fallback on error |
|
60
by Teddy Hogeborn
* mandos-client.c (main): Cast pid_t to unsigned int before printing. |
29 |
** Use asprintf instead of malloc and strcat? |
|
47
by Teddy Hogeborn
* plugbasedclient.c: Renamed to "mandos-client.c". All users changed. |
30 |
** use strsep instead of strtok? |
31 |
** use config file in addition to arguments |
|
32 |
** pass things in environment, like device name, etc |
|
33 |
||
34 |
* Password-request |
|
35 |
** [#A] Man page: man8/password-request.8mandos |
|
|
55
by Teddy Hogeborn
* TODO: More notes. |
36 |
*** DESCRIPTION |
37 |
Move options to new OPTIONS section. |
|
38 |
State that this command is not meant to be invoked directly, but |
|
39 |
is run as a plugin from mandos-client(8) and only run in the |
|
40 |
initrd environment, not the real system. |
|
41 |
*** EXIT STATUS |
|
42 |
Create this section |
|
43 |
*** EXAMPLES |
|
44 |
Examples of normal usage, debug usage, debugging by connecting |
|
45 |
directly, etc. |
|
46 |
*** FILES |
|
47 |
Describe the key files and the key ring files. Also note that |
|
48 |
they should normally have been automatically created. |
|
49 |
*** DIAGNOSTICS |
|
50 |
Create this section |
|
51 |
*** SECURITY |
|
52 |
Create this section |
|
53 |
*** NOTES |
|
54 |
Create this section (if needed) |
|
55 |
*** BUGS |
|
56 |
Create this section |
|
57 |
*** SEE ALSO |
|
58 |
Refer to mandos-client(8mandos) and password-prompt(8mandos) |
|
|
60
by Teddy Hogeborn
* mandos-client.c (main): Cast pid_t to unsigned int before printing. |
59 |
** Use asprintf instead of malloc and memcpy? |
|
44
by Teddy Hogeborn
* ca.pem: Removed. |
60 |
** IPv4 support |
|
36
by Teddy Hogeborn
* TODO: Converted to org-mode style |
61 |
** use strsep instead of strtok? |
|
44
by Teddy Hogeborn
* ca.pem: Removed. |
62 |
** Do not depend on GPG key rings on disk |
63 |
This would mean creating new GPG key rings with GPGME by importing |
|
|
47
by Teddy Hogeborn
* plugbasedclient.c: Renamed to "mandos-client.c". All users changed. |
64 |
the key files from scratch on every program start. |
65 |
||
66 |
* Password-prompt |
|
67 |
** [#A] Man page: man8/password-prompt.8mandos |
|
|
55
by Teddy Hogeborn
* TODO: More notes. |
68 |
*** DESCRIPTION |
69 |
Move options to new OPTIONS section. |
|
70 |
*** EXIT STATUS |
|
71 |
Create this section |
|
72 |
*** EXAMPLES |
|
73 |
Examples of normal usage, debug usage, with a prefix, etc. |
|
74 |
*** DIAGNOSTICS |
|
75 |
Create this section |
|
76 |
*** SECURITY |
|
77 |
Create this section |
|
78 |
Not much to do here but it is noteworthy to state the danger of |
|
79 |
not having a fallback option. |
|
80 |
*** NOTES |
|
81 |
Note that this is more or less a simple getpass(3) wrapper, even |
|
82 |
though actual use of getpass(3) is not guaranteed. |
|
83 |
*** BUGS |
|
84 |
Create this section |
|
85 |
*** SEE ALSO |
|
86 |
Refer to mandos-client(8mandos) and password-request(8mandos) |
|
|
47
by Teddy Hogeborn
* plugbasedclient.c: Renamed to "mandos-client.c". All users changed. |
87 |
** Use getpass(3)? |
|
53
by Teddy Hogeborn
Merge. |
88 |
Man page says "obsolete", but [[info:libc:getpass][GNU LibC Manual: Reading Passwords]] |
89 |
does not. See also [[http://sources.redhat.com/ml/libc-alpha/2003-05/msg00251.html][Marcus Brinkmann: Re: getpass obsolete?]] and |
|
90 |
[[http://article.gmane.org/gmane.comp.lib.glibc.alpha/4906][Petter Reinholdtsen: Re: getpass obsolete?]], and especially also |
|
91 |
[[http://www.steve.org.uk/Reference/Unix/faq_4.html#SEC48][Unix Programming FAQ 3.1 How can I make my program not echo input?]] |
|
|
64
by Teddy Hogeborn
* mandos-client.c (print_out_password): Strip trailing '\n'. |
92 |
** Replace completely with "/lib/cryptsetup/askpass"? |
|
36
by Teddy Hogeborn
* TODO: Converted to org-mode style |
93 |
|
|
55
by Teddy Hogeborn
* TODO: More notes. |
94 |
* Mandos (server) |
|
47
by Teddy Hogeborn
* plugbasedclient.c: Renamed to "mandos-client.c". All users changed. |
95 |
** [#A] Command man page: man8/mandos.8 |
|
55
by Teddy Hogeborn
* TODO: More notes. |
96 |
*** DESCRIPTION |
97 |
Move options to new OPTIONS section |
|
98 |
*** EXIT STATUS |
|
99 |
Create this section |
|
100 |
*** EXAMPLES |
|
101 |
Create this section |
|
102 |
*** FILES |
|
103 |
Describe briefly that the server gets global settings from |
|
104 |
mandos.conf and clients from clients.conf, but refer to their man |
|
105 |
pages for more details. |
|
106 |
*** DIAGNOSTICS |
|
107 |
Create this section |
|
108 |
*** SECURITY |
|
109 |
Create this section |
|
110 |
*** NOTES |
|
111 |
Create this section (if needed) |
|
112 |
*** BUGS |
|
113 |
Create this section |
|
114 |
*** SEE ALSO |
|
115 |
Refer to the client man page |
|
|
47
by Teddy Hogeborn
* plugbasedclient.c: Renamed to "mandos-client.c". All users changed. |
116 |
** [#A] Config file man page: man5/mandos.conf (mandos.conf) |
117 |
** [#A] Config file man page: man5/mandos-clients.conf (clients.conf) |
|
|
53
by Teddy Hogeborn
Merge. |
118 |
** [#A] /etc/init.d/mandos-server :teddy: |
|
44
by Teddy Hogeborn
* ca.pem: Removed. |
119 |
** Log level |
120 |
** /etc/mandos/clients.d/*.conf |
|
121 |
Watch this directory and add/remove/update clients?
|
|
122 |
** config for TXT record
|
|
|
36
by Teddy Hogeborn
* TODO: Converted to org-mode style |
123 |
** Run-time communication with server
|
|
53
by Teddy Hogeborn
Merge. |
124 |
Probably using D-Bus
|
125 |
See also [[*Mandos-tools]]
|
|
|
47
by Teddy Hogeborn
* plugbasedclient.c: Renamed to "mandos-client.c". All users changed. |
126 |
** Implement --foreground
|
127 |
[[info:standards:Option%20Table][Table of Long Options]]
|
|
128 |
** Implement --socket
|
|
129 |
[[info:standards:Option%20Table][Table of Long Options]]
|
|
|
64
by Teddy Hogeborn
* mandos-client.c (print_out_password): Strip trailing '\n'. |
130 |
** Date+time on console log messages
|
131 |
Is this the default?
|
|
|
36
by Teddy Hogeborn
* TODO: Converted to org-mode style |
132 |
|
133 |
* Mandos-tools/utilities
|
|
134 |
All of this probably using D-Bus
|
|
135 |
** List clients
|
|
|
53
by Teddy Hogeborn
Merge. |
136 |
** Disable client
|
|
36
by Teddy Hogeborn
* TODO: Converted to org-mode style |
137 |
** Enable client
|
138 |
||
139 |
* Installer
|
|
|
55
by Teddy Hogeborn
* TODO: More notes. |
140 |
** DONE [#A] Change initrd.img file to not be publically readable
|
|
54
by Teddy Hogeborn
Merge. |
141 |
/etc/initramfs-tools/conf.d/mandos
|
142 |
UMASK=027
|
|
|
57
by Teddy Hogeborn
* mandos (version): New variable. |
143 |
** Update initrd.img after installation
|
|
50
by Teddy Hogeborn
* Makefile: Do DocBook manual conversion in a better way. |
144 |
** [#A] Create mandos user and group for server
|
145 |
** [#A] Create /var/run/mandos directory with perm and ownership
|
|
|
36
by Teddy Hogeborn
* TODO: Converted to org-mode style |
146 |
|
|
57
by Teddy Hogeborn
* mandos (version): New variable. |
147 |
* [#A] Package
|
|
55
by Teddy Hogeborn
* TODO: More notes. |
148 |
** /etc/bash_completion.d/mandos
|
|
64
by Teddy Hogeborn
* mandos-client.c (print_out_password): Strip trailing '\n'. |
149 |
** /usr/share/initramfs-tools/hooks/mandos
|
|
57
by Teddy Hogeborn
* mandos (version): New variable. |
150 |
[[file:/usr/share/doc/initramfs-tools/examples/example_hook][Example initramfs-tools hook script]]
|
151 |
*** Create GPG key ring files in initrd
|
|
|
61
by Teddy Hogeborn
* mandos (console): Define handler globally. |
152 |
** unperish
|
153 |
** bzr-builddeb
|
|
|
55
by Teddy Hogeborn
* TODO: More notes. |
154 |
|
|
24.1.30
by Björn Påhlsson
Added more stuff to do |
155 |
* INSTALL file
|
156 |
||
|
56
by Teddy Hogeborn
Resolving merge commit. |
157 |
* Web site
|
|
24.1.30
by Björn Påhlsson
Added more stuff to do |
158 |
|
159 |
* Mailing list
|
|
160 |
||
161 |
* Announce project on news
|
|
|
56
by Teddy Hogeborn
Resolving merge commit. |
162 |
[[news:comp.os.linux.announce]]
|
|
24.1.30
by Björn Påhlsson
Added more stuff to do |
163 |
|
|
36
by Teddy Hogeborn
* TODO: Converted to org-mode style |
164 |
|
165 |
#+STARTUP: showall
|