/mandos/trunk : revision 389

1

-*- org -*-

2

3

* mandos-client

4

** TODO [#A] Clean up /tmp directory on signal

4

** TODO [#B] use scandir(3) instead of readdir(3)

5

** TODO [#B] Prefix all debug output with "Mandos plugin " + program_invocation_short_name

6

** TODO use error() instead of perror()

7

** TODO [#B] Retry a server which has a non-definite reply:

8

*** A closed connection during the TLS handshake

9

*** A TCP timeout

10

** TODO [#B] Use capabilities instead of seteuid().

11

** TODO use EX_* from <sysexits.h>

12

13

* splashy

14

** TODO [#B] use scandir(3) instead of readdir(3)

15

** TODO [#B] Prefix all debug output with "Mandos plugin " + program_invocation_short_name

16

** TODO use error() instead of perror()

17

18

* usplash

19

** TODO [#B] use scandir(3) instead of readdir(3)

20

** TODO [#B] Prefix all debug output with "Mandos plugin " + program_invocation_short_name

21

** TODO use EX_* from <sysexits.h>

22

** TODO use error() instead of perror()

23

24

* askpass-fifo

25

** TODO [#B] Prefix all debug output with "Mandos plugin " + program_invocation_short_name

26

** TODO [#B] Drop privileges after opening FIFO.

27

** TODO use EX_* from <sysexits.h>

28

** TODO use error() instead of perror()

29

30

* password-prompt

31

** TODO [#B] Prefix all debug output with "Mandos plugin " + program_invocation_short_name

32

** TODO use EX_* from <sysexits.h>

33

** TODO use error() instead of perror()

34

35

* TODO passdev

5

36

6

37

* plugin-runner

7

38

** TODO [#B] use scandir(3) instead of readdir(3)

39

** TODO [#C] use same file name rules as run-parts(8)

40

** TODO use EX_* from <sysexits.h>

41

** TODO use error() instead of perror()

8

42

9

43

* mandos (server)

10

44

** TODO [#B] Log level :BUGS:

24

58

[[info:standards:Option%20Table][Table of Long Options]]

25

59

** TODO Date+time on console log messages :BUGS:

26

60

Is this the default?

27

** TODO Split IPv6_TCPServer into a generic and Mandos-specific class

28

** TODO move handle_ipc out of IPv6_TCPServer

29

61

** TODO DBusServiceObjectUsingSuper

62

** TODO Global enable/disable flag

63

** TODO By-client countdown on secrets given

64

** TODO Fix problem with fsck taking a really long time

65

Whenever a client successfully gets a secret it could get a

66

one-time timeout boost to allow for an fsck-incurred delay

67

** TODO Delay before client receives key

68

This would give an operator opportunity to cancel the request if

69

desired.

70

** TODO Client manual approval mode

71

A client needs manual approval on the server before it gets the

72

secret

73

** TODO Persistent state

74

/var/lib/mandos/*

30

75

31

76

* mandos.xml

32

77

** [[file:mandos.xml::XXX][Document D-Bus interface]]

37

82

*** Handle "no D-Bus server" and/or "no Mandos server found" better

38

83

*** [#B] --dump option

39

84

40

* mandos-name

41

** D-Bus mail loop w/ signal receiver

42

** Urwid/Newt client data displayer

85

* TODO mandos-dispatch

86

Listens for specified D-Bus signals and spawns shell commands with

87

arguments.

88

89

* mandos-monitor

90

** D-Bus main loop w/ signal receiver

91

** Urwid client data displayer

43

92

*** Urwid scaffolding

44

93

*** Client Widgets

45

94

*** Properties popup

51

100

** TODO [#B] "--test" option

52

101

For testing decryption before rebooting.

53

102

103

* Makefile

104

** Implement DEB_BUILD_OPTIONS

105

http://www.debian.org/doc/debian-policy/ch-source.html#s-debianrules-options

106

54

107

* Package

55

108

** /usr/share/initramfs-tools/hooks/mandos

109

*** TODO [#C] use same file name rules as run-parts(8)

56

110

*** TODO [#C] Do not install in initrd.img if configured not to.

57

111

Use "/etc/initramfs-tools/hooksconf.d/mandos"?

58

112

** TODO [#C] /etc/bash_completion.d/mandos