/mandos/trunk : revision 392

1

-*- org -*-

2

3

* mandos-client

4

** TODO [#A] Clean up /tmp directory on signal

4

** TODO [#B] use scandir(3) instead of readdir(3)

5

** TODO [#B] Prefix all debug output with "Mandos plugin " + program_invocation_short_name

6

** TODO use error() instead of perror()

7

** TODO [#B] Retry a server which has a non-definite reply:

8

*** A closed connection during the TLS handshake

9

*** A TCP timeout

10

** TODO [#B] Use capabilities instead of seteuid().

11

** TODO use EX_* from <sysexits.h>

12

13

* splashy

14

** TODO [#B] use scandir(3) instead of readdir(3)

15

** TODO [#B] Prefix all debug output with "Mandos plugin " + program_invocation_short_name

16

** TODO use error() instead of perror()

17

18

* usplash

19

** TODO [#B] use scandir(3) instead of readdir(3)

20

** TODO [#B] Prefix all debug output with "Mandos plugin " + program_invocation_short_name

21

** TODO use error() instead of perror()

22

** TODO use EX_* from <sysexits.h>

23

24

* askpass-fifo

25

** TODO [#B] Prefix all debug output with "Mandos plugin " + program_invocation_short_name

26

** TODO use error() instead of perror()

27

** TODO [#B] Drop privileges after opening FIFO.

28

29

* password-prompt

30

** TODO [#B] Prefix all debug output with "Mandos plugin " + program_invocation_short_name

31

** TODO use error() instead of perror()

32

** TODO lock stdin (with flock()?)

33

34

* TODO passdev

5

35

6

36

* plugin-runner

7

37

** TODO [#B] use scandir(3) instead of readdir(3)

38

** TODO [#C] use same file name rules as run-parts(8)

39

** TODO use EX_* from <sysexits.h>

40

** TODO use error() instead of perror()

8

41

9

42

* mandos (server)

10

43

** TODO [#B] Log level :BUGS:

24

57

[[info:standards:Option%20Table][Table of Long Options]]

25

58

** TODO Date+time on console log messages :BUGS:

26

59

Is this the default?

60

** TODO DBusServiceObjectUsingSuper

61

** TODO Global enable/disable flag

62

** TODO By-client countdown on secrets given

63

** TODO Fix problem with fsck taking a really long time

64

Whenever a client successfully gets a secret it could get a

65

one-time timeout boost to allow for an fsck-incurred delay

66

** TODO Delay before client receives key

67

This would give an operator opportunity to cancel the request if

68

desired.

69

** TODO Client manual approval mode

70

A client needs manual approval on the server before it gets the

71

secret

72

** TODO Persistent state

73

/var/lib/mandos/*

27

74

28

75

* mandos.xml

29

76

** [[file:mandos.xml::XXX][Document D-Bus interface]]

34

81

*** Handle "no D-Bus server" and/or "no Mandos server found" better

35

82

*** [#B] --dump option

36

83

37

* Curses interface

84

* TODO mandos-dispatch

85

Listens for specified D-Bus signals and spawns shell commands with

86

arguments.

87

88

* mandos-monitor

89

** D-Bus main loop w/ signal receiver

90

** Urwid client data displayer

91

*** Urwid scaffolding

92

*** Client Widgets

93

*** Properties popup

38

94

39

95

* mandos-keygen

40

96

** TODO Loop until passwords match when run interactively

43

99

** TODO [#B] "--test" option

44

100

For testing decryption before rebooting.

45

101

102

* Makefile

103

** Implement DEB_BUILD_OPTIONS

104

http://www.debian.org/doc/debian-policy/ch-source.html#s-debianrules-options

105

46

106

* Package

47

107

** /usr/share/initramfs-tools/hooks/mandos

108

*** TODO [#C] use same file name rules as run-parts(8)

48

109

*** TODO [#C] Do not install in initrd.img if configured not to.

49

110

Use "/etc/initramfs-tools/hooksconf.d/mandos"?

50

111

** TODO [#C] /etc/bash_completion.d/mandos