To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
« back to all changes in this revision
Viewing changes to TODO
- browse files at revision 427
- compare with another revision
- download diff
- download tarball
- view history from revision 427
- Committer: Teddy Hogeborn
- Date: 2010-09-13 05:56:48 UTC
- mfrom: (420.1.1 mandos-local)
- Revision ID: teddy@fukt.bsnet.se-20100913055648-v92t4egg6xubyqqo
Merge Makefile change.
- files added:
- .bzr-builddeb
- debian
- debian/po
- files removed:
- network-protocol.txt
- files renamed:
- plugins.d/password-request.c => plugins.d/mandos-client.c
- plugins.d/password-request.xml => plugins.d/mandos-client.xml
- files modified:
- Makefile
added
removed
TODO
1
1
-*- org -*-
2
2
3
* [#A] README file
4
5
* Mandos-client
6
** [#A] Change syntax for arguments
7
** [#A] Man page: man8/mandos-client.8mandos
8
*** DESCRIPTION
9
Describe the plus sign syntax for passing options from crypttab
10
*** EXIT STATUS
11
Text needed
12
*** EXAMPLES
13
Examples of normal usage, debug usage, debugging single or all
14
plugins, examples of crypttab lines with plus syntax, etc.
15
*** FILES
16
Text needed
17
*** SECURITY
18
Text needed
19
*** NOTES
20
Text needed
21
*** BUGS
22
Text needed
23
*** SEE ALSO
24
Explaining test on what you can read
25
** Use asprintf instead of malloc and strcat?
26
** use strsep instead of strtok?
27
** use config file in addition to arguments
28
** pass things in environment, like device name, etc
29
** Keydir move: /etc/mandos -> /etc/keys/mandos
30
Must create in preinst if not pre-depending on cryptsetup
31
32
* Password-request
33
** [#A] Man page: man8/password-request.8mandos
34
** [#B] Temporarily lower kernel log level
35
for less printouts during sucessfull boot.
36
*** DESCRIPTION
37
Move options to new OPTIONS section.
38
State that this command is not meant to be invoked directly, but
39
is run as a plugin from mandos-client(8) and only run in the
40
initrd environment, not the real system.
41
*** EXIT STATUS
42
Create this section
43
*** EXAMPLES
44
Examples of normal usage, debug usage, debugging by connecting
45
directly, etc.
46
*** FILES
47
Describe the key files and the key ring files. Also note that
48
they should normally have been automatically created.
49
*** DIAGNOSTICS
50
Create this section
51
*** SECURITY
52
Create this section
53
*** NOTES
54
Create this section (if needed)
55
*** BUGS
56
Create this section
57
*** SEE ALSO
58
Refer to mandos-client(8mandos) and password-prompt(8mandos)
59
** IPv4 support
60
** use strsep instead of strtok?
61
** Do not depend on GnuPG key rings on disk
62
This would mean creating new GnuPG key rings with GPGME by
63
importing the key files from scratch on every program start.
64
65
* Password-prompt
66
** [#A] Man page: man8/password-prompt.8mandos
67
** Show getenv("cryptsource") and getenv("crypttarget") if set
68
cryptsource will be the device, like "/dev/sda3", and crypttarget
69
will be the device mapper name, like "sda3_crypt".
70
*** DESCRIPTION
71
Move options to new OPTIONS section.
72
*** EXIT STATUS
73
Create this section
74
*** EXAMPLES
75
Examples of normal usage, debug usage, with a prefix, etc.
76
*** DIAGNOSTICS
77
Create this section
78
*** SECURITY
79
Create this section
80
Not much to do here but it is noteworthy to state the danger of
81
not having a fallback option.
82
*** NOTES
83
Note that this is more or less a simple getpass(3) wrapper, even
84
though actual use of getpass(3) is not guaranteed.
85
*** BUGS
86
Create this section
87
*** SEE ALSO
88
Refer to mandos-client(8mandos) and password-request(8mandos)
89
** Use getpass(3)?
90
Man page says "obsolete", but [[info:libc:getpass][GNU LibC Manual: Reading Passwords]]
91
does not. See also [[http://sources.redhat.com/ml/libc-alpha/2003-05/msg00251.html][Marcus Brinkmann: Re: getpass obsolete?]] and
92
[[http://article.gmane.org/gmane.comp.lib.glibc.alpha/4906][Petter Reinholdtsen: Re: getpass obsolete?]], and especially also
93
[[http://www.steve.org.uk/Reference/Unix/faq_4.html#SEC48][Unix Programming FAQ 3.1 How can I make my program not echo input?]]
94
** Replace completely with "/lib/cryptsetup/askpass"?
95
96
* Mandos (server)
97
** [#A] Command man page: man8/mandos.8
98
*** DESCRIPTION
99
Move options to new OPTIONS section
100
*** EXIT STATUS
101
Create this section
102
*** EXAMPLES
103
Create this section
104
*** FILES
105
Describe briefly that the server gets global settings from
106
mandos.conf and clients from clients.conf, but refer to their man
107
pages for more details.
108
*** DIAGNOSTICS
109
Create this section
110
*** SECURITY
111
Create this section
112
*** NOTES
113
Create this section (if needed)
114
*** BUGS
115
Create this section
116
*** SEE ALSO
117
Refer to the client man page
118
** [#A] Config file man page: man5/mandos.conf (mandos.conf)
119
** [#A] Config file man page: man5/mandos-clients.conf (clients.conf)
120
** [#A] /etc/init.d/mandos-server :teddy:
121
** Log level
122
** /etc/mandos/clients.d/*.conf
123
Watch this directory and add/remove/update clients?
124
** config for TXT record
125
** Run-time communication with server
126
Probably using D-Bus
127
See also [[*Mandos-tools]]
128
** Implement --foreground
129
[[info:standards:Option%20Table][Table of Long Options]]
130
** Implement --socket
131
[[info:standards:Option%20Table][Table of Long Options]]
132
** Date+time on console log messages
3
* Use _attribute_((nonnull)) wherever possible.
4
5
* Release critical
6
** TODO Change make-run-server to not include --no-dbus
7
** plymouth.8mandos
8
9
* mandos-client
10
** TODO [#B] use scandir(3) instead of readdir(3)
11
** TODO [#B] Prefix all debug output with "Mandos plugin " + program_invocation_short_name
12
** TODO [#B] Retry a server which has a non-definite reply:
13
*** A closed connection during the TLS handshake
14
*** A TCP timeout
15
** TODO [#B] Use capabilities instead of seteuid().
16
** TODO [#A] Retry --connect forever
17
18
* splashy
19
** TODO [#B] use scandir(3) instead of readdir(3)
20
** TODO [#B] Prefix all debug output with "Mandos plugin " + program_invocation_short_name
21
22
* usplash
23
** TODO [#A] Make it work again
24
** TODO [#B] use scandir(3) instead of readdir(3)
25
** TODO [#B] Prefix all debug output with "Mandos plugin " + program_invocation_short_name
26
** TODO Use [[info:libc:Argz%20Functions][argz_extract]]
27
28
* askpass-fifo
29
** TODO [#B] Prefix all debug output with "Mandos plugin " + program_invocation_short_name
30
** TODO [#B] Drop privileges after opening FIFO.
31
32
* password-prompt
33
** TODO [#B] Prefix all debug output with "Mandos plugin " + program_invocation_short_name
34
** TODO [#B] lock stdin (with flock()?)
35
36
* plymouth
37
** TODO Use [[info:libc:Argz%20Functions][argz_extract]]
38
39
* TODO [#B] passdev
40
41
* plugin-runner
42
** TODO [#B] use scandir(3) instead of readdir(3)
43
** TODO [#C] use same file name rules as run-parts(8)
44
** kernel command line option for debug info
45
** TODO [#B] Use openat()
46
47
* mandos (server)
48
** TODO [#B] Log level :BUGS:
49
** TODO Persistent state :BUGS:
50
/var/lib/mandos/*
51
*** TODO /etc/mandos/clients.d/*.conf
52
Watch this directory and add/remove/update clients?
53
** TODO [#C] config for TXT record
54
** TODO Log level option
55
syslogger.setLevel(logging.WARNING)
56
+ SetLogLevel D-Bus call
57
** TODO Implement --foreground :BUGS:
58
[[info:standards:Option%20Table][Table of Long Options]]
59
** TODO Implement --socket
60
[[info:standards:Option%20Table][Table of Long Options]]
61
** TODO Date+time on console log messages :BUGS:
133
62
Is this the default?
134
135
* Mandos-tools/utilities
136
All of this probably using D-Bus
137
** List clients
138
** Disable client
139
** Enable client
140
141
* Installer
142
** Client
143
*** DONE [#A] Change initrd.img file to not be publically readable
144
/usr/share/initramfs-tools/conf-hooks.d/mandos
145
UMASK=027
146
*** Update initrd.img after installation
147
** Server
148
*** [#A] Create mandos user and group for server
149
*** [#A] Create /var/run/mandos directory with perm and ownership
150
151
** mandos-keygen
152
*** [#A] Command man page: man8/mandos-keygen.8
153
*** [#A] Output cut-and-paste ready snippet for clients.conf.
154
155
* [#A] Package
63
** TODO [#C] DBusServiceObjectUsingSuper
64
** TODO [#B] Global enable/disable flag
65
** TODO [#B] By-client countdown on secrets given
66
** TODO [#B] Fix problem with fsck taking a really long time
67
Whenever a client successfully gets a secret it could get a
68
one-time timeout boost to allow for an fsck-incurred delay
69
** TODO [#A] Delay before client receives key
70
This would give an operator opportunity to cancel the request if
71
desired.
72
** TODO [#A] Client manual approval mode
73
A client needs manual approval on the server before it gets the
74
secret
75
** TODO [#B] Support RFC 3339 time duration syntax
76
** More D-Bus methods
77
*** NeedsApproval(50, True) -> timeout, default approve
78
Default approval is configurable, but True by default
79
+ Approve(True) -> approve sending saved
80
+ Approve(False) -> Close client connection immediately
81
*** NeedsPassword(50) - Timeout, default disapprove
82
+ SetPass(u"gazonk", True) -> Approval, persistent
83
+ Approve(False) -> Close client connection immediately
84
** TODO [#C] python-parsedatetime
85
** TODO [#C] systemd/launchd
86
http://0pointer.de/blog/projects/systemd.html
87
** TODO Separate logging logic to own object
88
** TODO make clients to a dict!
89
** TODO [#A] Limit approval_delay to max gnutls/tls timeout value
90
91
* mandos.xml
92
** Add mandos contact info in manual pages
93
94
* mandos-ctl
95
*** Handle "no D-Bus server" and/or "no Mandos server found" better
96
*** [#B] --dump option
97
** TODO Support RFC 3339 time duration syntax
98
99
* TODO mandos-dispatch
100
Listens for specified D-Bus signals and spawns shell commands with
101
arguments.
102
103
* mandos-monitor
104
** TODO help should be toggable
105
** Urwid client data displayer
106
Better view of client data in the listing
107
*** Properties popup
108
** Nicer crashes. Stack traces Messes up shell.
109
*** Print a nice "We are sorry" message, save stack trace to log.
110
111
* mandos-keygen
112
** TODO Loop until passwords match when run interactively
113
** TODO "--secfile" option
114
Using the "secfile" option instead of "secret"
115
** TODO [#B] "--test" option
116
For testing decryption before rebooting.
117
118
* Makefile
119
** TODO Add "--Xlinker --as-needed"
120
http://udrepper.livejournal.com/19395.html
121
** TODO [#C] Implement DEB_BUILD_OPTIONS
122
http://www.debian.org/doc/debian-policy/ch-source.html#s-debianrules-options
123
124
* Package
156
125
** /usr/share/initramfs-tools/hooks/mandos
157
*** Do not install in initrd.img if configured not to
158
Use "/etc/initramfs-tools/conf.d/mandos"? Definitely a debconf
159
question.
160
** /etc/bash_completion.d/mandos
161
*** From xml sources directly?
162
** unperish
163
** bzr-builddeb
164
165
* INSTALL file
166
167
* Web site
168
169
* Mailing list
170
171
* Announce project on news
172
[[news:comp.os.linux.announce]]
126
*** TODO [#C] use same file name rules as run-parts(8)
127
*** TODO [#C] Do not install in initrd.img if configured not to.
128
Use "/etc/initramfs-tools/hooksconf.d/mandos"?
129
** TODO [#C] /etc/bash_completion.d/mandos
130
From XML sources directly?
131
132
* Side Stuff
133
** TODO Locate which packet move the other bin/sh when busy box is deactivated
134
** TODO contact owner of packet, and ask them to have that shell static in position regardless of busybox
173
135
174
136
175
137
#+STARTUP: showall
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0