/mandos/trunk : revision 379

1

-*- org -*-

2

3

* mandos-client

4

** TODO [#A] Clean up /tmp directory on signal

4

** TODO [#B] use scandir(3) instead of readdir(3)

5

** TODO [#B] Prefix all debug output with argv[0]

6

** TODO [#B] Retry a server which has a non-definite reply:

7

*** A closed connection during the TLS handshake

8

*** A TCP timeout

9

** TODO [#B] Use capabilities instead of seteuid().

10

11

* splashy

12

** TODO [#B] use scandir(3) instead of readdir(3)

13

** TODO [#B] Prefix all debug output with "Mandos plugin " + argv[0]

14

15

* usplash

16

** TODO [#B] use scandir(3) instead of readdir(3)

17

** TODO [#B] Prefix all debug output with "Mandos plugin " + argv[0]

18

19

* askpass-fifo

20

** TODO [#B] Prefix all debug output with "Mandos plugin " + argv[0]

21

** TODO [#B] Drop privileges after opening FIFO.

22

23

* password-prompt

24

** TODO [#B] Prefix all debug output with "Mandos plugin " + argv[0]

25

26

* TODO passdev

5

27

6

28

* plugin-runner

7

29

** TODO [#B] use scandir(3) instead of readdir(3)

30

** TODO [#C] use same file name rules as run-parts(8)

8

31

9

32

* mandos (server)

10

33

** TODO [#B] Log level :BUGS:

24

47

[[info:standards:Option%20Table][Table of Long Options]]

25

48

** TODO Date+time on console log messages :BUGS:

26

49

Is this the default?

27

** DBusClient inheriting from Client

28

** fingerprint as a member of TCP_handler

29

** peer_certificate as a member of TCP_handler

30

** TCP_handler needs a better name!

31

** move handle_ipc out of IPv6_TCPServer

32

** DBusServiceObjectUsingSuper

50

** TODO DBusServiceObjectUsingSuper

51

** TODO Global enable/disable flag

52

** TODO By-client countdown on secrets given

53

** TODO Fix problem with fsck taking a really long time

54

Whenever a client successfully gets a secret it could get a

55

one-time timeout boost to allow for an fsck-incurred delay

56

** TODO Delay before client receives key

57

This would give an operator opportunity to cancel the request if

58

desired.

59

** TODO Client manual approval mode

60

A client needs manual approval on the server before it gets the

61

secret

62

** TODO Persistent state

63

/var/lib/mandos/*

33

64

34

65

* mandos.xml

35

66

** [[file:mandos.xml::XXX][Document D-Bus interface]]

40

71

*** Handle "no D-Bus server" and/or "no Mandos server found" better

41

72

*** [#B] --dump option

42

73

43

* mandos-name

74

* TODO mandos-dispatch

75

Listens for specified D-Bus signals and spawns shell commands with

76

arguments.

77

78

* mandos-monitor

44

79

** D-Bus mail loop w/ signal receiver

45

** Urwid client data displayer

46

*** Urwid scaffolding

80

** Snack/Newt client data displayer

47

81

*** Client Widgets

48

82

*** Properties popup

49

83

54

88

** TODO [#B] "--test" option

55

89

For testing decryption before rebooting.

56

90

91

* Makefile

92

** Implement DEB_BUILD_OPTIONS

93

http://www.debian.org/doc/debian-policy/ch-source.html#s-debianrules-options

94

57

95

* Package

58

96

** /usr/share/initramfs-tools/hooks/mandos

97

*** TODO [#C] use same file name rules as run-parts(8)

59

98

*** TODO [#C] Do not install in initrd.img if configured not to.

60

99

Use "/etc/initramfs-tools/hooksconf.d/mandos"?

61

100

** TODO [#C] /etc/bash_completion.d/mandos