/mandos/trunk : revision 412

1

-*- org -*-

2

3

* mandos-client

4

** TODO [#A] Clean up /tmp directory and take down interface on signal

4

** TODO [#B] use scandir(3) instead of readdir(3)

5

** TODO [#B] Prefix all debug output with "Mandos plugin " + program_invocation_short_name

6

** TODO use error() instead of perror()

7

** TODO [#B] Retry a server which has a non-definite reply:

8

*** A closed connection during the TLS handshake

9

*** A TCP timeout

10

** TODO [#B] Use capabilities instead of seteuid().

11

12

* splashy

13

** TODO [#B] use scandir(3) instead of readdir(3)

14

** TODO [#B] Prefix all debug output with "Mandos plugin " + program_invocation_short_name

15

** TODO use error() instead of perror()

16

17

* usplash

18

** TODO [#B] use scandir(3) instead of readdir(3)

19

** TODO [#B] Prefix all debug output with "Mandos plugin " + program_invocation_short_name

20

** TODO use error() instead of perror()

21

22

* askpass-fifo

23

** TODO [#B] Prefix all debug output with "Mandos plugin " + program_invocation_short_name

24

** TODO use error() instead of perror()

25

** TODO [#B] Drop privileges after opening FIFO.

26

27

* password-prompt

28

** TODO [#B] Prefix all debug output with "Mandos plugin " + program_invocation_short_name

29

** TODO use error() instead of perror()

30

** TODO lock stdin (with flock()?)

31

32

* TODO passdev

5

33

6

34

* plugin-runner

7

35

** TODO [#B] use scandir(3) instead of readdir(3)

8

36

** TODO [#C] use same file name rules as run-parts(8)

37

** TODO use error() instead of perror()

9

38

10

39

* mandos (server)

11

40

** TODO [#B] Log level :BUGS:

25

54

[[info:standards:Option%20Table][Table of Long Options]]

26

55

** TODO Date+time on console log messages :BUGS:

27

56

Is this the default?

28

** TODO Split IPv6_TCPServer into a generic and Mandos-specific class

29

** TODO move handle_ipc out of IPv6_TCPServer

30

57

** TODO DBusServiceObjectUsingSuper

31

** Global enable/disable flag

32

** By-client countdown on secrets given

58

** TODO Global enable/disable flag

59

** TODO By-client countdown on secrets given

60

** TODO Fix problem with fsck taking a really long time

61

Whenever a client successfully gets a secret it could get a

62

one-time timeout boost to allow for an fsck-incurred delay

63

** TODO Delay before client receives key

64

This would give an operator opportunity to cancel the request if

65

desired.

66

** TODO Client manual approval mode

67

A client needs manual approval on the server before it gets the

68

secret

69

** TODO Persistent state

70

/var/lib/mandos/*

71

** TODO Support RFC 3339 time duration syntax

33

72

34

73

* mandos.xml

35

74

** [[file:mandos.xml::XXX][Document D-Bus interface]]

39

78

* mandos-ctl

40

79

*** Handle "no D-Bus server" and/or "no Mandos server found" better

41

80

*** [#B] --dump option

42

43

* mandos-name

44

** D-Bus mail loop w/ signal receiver

45

** Urwid/Newt client data displayer

46

*** Urwid scaffolding

47

*** Client Widgets

81

** TODO Support RFC 3339 time duration syntax

82

83

* TODO mandos-dispatch

84

Listens for specified D-Bus signals and spawns shell commands with

85

arguments.

86

87

* mandos-monitor

88

** Urwid client data displayer

48

89

*** Properties popup

49

90

50

91

* mandos-keygen

54

95

** TODO [#B] "--test" option

55

96

For testing decryption before rebooting.

56

97

98

* Makefile

99

** Implement DEB_BUILD_OPTIONS

100

http://www.debian.org/doc/debian-policy/ch-source.html#s-debianrules-options

101

57

102

* Package

58

103

** /usr/share/initramfs-tools/hooks/mandos

59

104

*** TODO [#C] use same file name rules as run-parts(8)