4
** TODO [#B] Temporarily lower kernel log level
5
for less printouts during sucessfull boot.
6
klogctl(6, NULL, 0); klogctl(7, NULL, 0);
7
** TODO [#C] IPv4 support
10
** TODO [#B] Log level :bugs:
11
** TODO /etc/mandos/clients.d/*.conf
7
** [#A] check exit codes of all system calls
8
** [#B] header files/symbols tally
10
** use strsep instead of strtok?
11
** Do not depend on GPG key rings on disk
12
This would mean creating new GPG key rings with GPGME by importing
13
the key files from scratch every time we start the program.
20
** [#A] check exit codes of all system calls
21
** [#B] header files/symbols tally
22
** use strsep instead of strtok?
23
** use config file in addition to arguments
24
** pass things in environment, like device name, etc
28
** [#A] write PID file
29
** [#A] /etc/init.d/mandos-server
30
** Better comments in config files
32
** /etc/mandos/clients.d/*.conf
12
33
Watch this directory and add/remove/update clients?
13
** TODO config for TXT record
14
** TODO [#B] Run-time communication with server :bugs:
16
See also [[*Mandos-tools]]
18
Remove unneeded Get* methods?
22
Does this have to be "GetClients" so as not to collide with the
25
syslogger.setLevel(logging.WARNING)
27
+ GetClientsProperties "aa{sv}":
28
dbus.Array(dbus.Dictionary({dbus.String("name"):
29
dbus.String("foo", variant_level=1),
30
dbus.String("created"):
31
dbus.Array(dbus.Int16(2008), ...,
33
+ [[http://log.ometer.com/2007-05.html][Best D-Bus practices]]
34
** TODO Implement --foreground :bugs:
35
[[info:standards:Option%20Table][Table of Long Options]]
36
** TODO Implement --socket
37
[[info:standards:Option%20Table][Table of Long Options]]
38
** TODO Date+time on console log messages :bugs:
40
** TODO delete hook when clients fall out by timeout
41
This will not be strictly necessary when the D-Bus interface is
34
** config for TXT record
35
** Run-time communication with server
44
38
* Mandos-tools/utilities
45
39
All of this probably using D-Bus
47
** TODO Disable client
52
** TODO "--secfile" option
53
Using the "secfile" option instead of "secret"
54
** TODO [#B] "--test" option
55
For testing decryption before rebooting.
58
** /usr/share/initramfs-tools/hooks/mandos
59
*** TODO Do not install in initrd.img if configured not to.
60
Use "/etc/initramfs-tools/conf.d/mandos"? Definitely a debconf
62
** TODO /etc/bash_completion.d/mandos
63
From XML sources directly?
45
** Change initrd.img file to not be publically readable
46
** Create GPG key ring files in initrd