2
configuration for OpenPGP key dir
3
header files/symbols tally
4
check exit codes of all system calls
6
protocol version header
7
use strsep instead of strtok?
10
disable certain plugins
11
header files/symbols tally
12
check exit codes of all system calls
13
change uid to nobody:nogroup
14
other drop privs stuff?
15
pass things in environment, like device name, etc
16
Does cryptsetup already do this?
17
Configurable plugin dir
18
use strsep instead of strtok?
23
protocol version header
24
Run-time communication with server
27
[Mandos-tools/utilities]
4
** TODO [#A] Clean up /tmp directory and take down interface on signal :test:
5
** TODO [#B] use scandir(3) instead of readdir(3)
6
** TODO [#B] Prefix all debug output with argv[0]
7
** TODO [#B] Retry a server which has a non-definite reply.
8
*** A closed connection during the TLS handshake
12
** TODO [#A] Re-raise signal received when exiting due to handled signal :test:
13
** TODO [#B] use scandir(3) instead of readdir(3)
14
** TODO [#B] Prefix all debug output with argv[0]
17
** TODO [#A] Re-raise signal received when exiting due to handled signal.
18
** TODO [#B] use scandir(3) instead of readdir(3)
19
** TODO [#B] Prefix all debug output with argv[0]
22
** TODO [#B] Prefix all debug output with argv[0]
25
** TODO [#B] use scandir(3) instead of readdir(3)
26
** TODO [#C] use same file name rules as run-parts(8)
29
** TODO [#B] Log level :BUGS:
30
** TODO /etc/mandos/clients.d/*.conf
31
Watch this directory and add/remove/update clients?
32
** TODO config for TXT record
33
** TODO [#B] Run-time communication with server :BUGS:
38
syslogger.setLevel(logging.WARNING)
39
+ [[http://log.ometer.com/2007-05.html][Best D-Bus practices]]
40
** TODO Implement --foreground :BUGS:
41
[[info:standards:Option%20Table][Table of Long Options]]
42
** TODO Implement --socket
43
[[info:standards:Option%20Table][Table of Long Options]]
44
** TODO Date+time on console log messages :BUGS:
46
** TODO Split IPv6_TCPServer into a generic and Mandos-specific class
47
** TODO move handle_ipc out of IPv6_TCPServer
48
** TODO DBusServiceObjectUsingSuper
49
** Global enable/disable flag
50
** By-client countdown on secrets given
53
** [[file:mandos.xml::XXX][Document D-Bus interface]]
55
* Provide and install /etc/dbus-1/system.d/mandos.conf
58
*** Handle "no D-Bus server" and/or "no Mandos server found" better
59
*** [#B] --dump option
62
** D-Bus mail loop w/ signal receiver
63
** Urwid/Newt client data displayer
69
** TODO Loop until passwords match when run interactively
70
** TODO "--secfile" option
71
Using the "secfile" option instead of "secret"
72
** TODO [#B] "--test" option
73
For testing decryption before rebooting.
76
** /usr/share/initramfs-tools/hooks/mandos
77
*** TODO [#C] use same file name rules as run-parts(8)
78
*** TODO [#C] Do not install in initrd.img if configured not to.
79
Use "/etc/initramfs-tools/hooksconf.d/mandos"?
80
** TODO [#C] /etc/bash_completion.d/mandos
81
From XML sources directly?