/mandos/trunk : revision 539

1

-*- org -*-

2

3

* Use _attribute_((nonnull)) wherever possible.

4

5

3

* [[http://www.undeadly.org/cgi?action=article&sid=20110530221728][OpenBSD]]

6

4

7

5

* mandos-applet

8

6

9

7

* mandos-client

10

** TODO [#B] Flag fprintf_plus so compiler checks the format string.

11

** TODO [#A] OpenVPN network hook

12

8

** TODO [#A] Wireless network hook

13

9

** TODO [#B] Use capabilities instead of seteuid().

14

10

** TODO [#B] Use struct sockaddr_storage instead of a union

43

39

** TODO [#B] Use openat()

44

40

45

41

* mandos (server)

42

** TODO Document why we ignore sigint

46

43

** TODO [#B] Log level :BUGS:

47

** TODO Persistent state :BUGS:

48

/var/lib/mandos/*

49

44

*** TODO /etc/mandos/clients.d/*.conf

50

45

Watch this directory and add/remove/update clients?

51

46

** TODO [#C] config for TXT record

52

** TODO Log level option

53

syslogger.setLevel(logging.WARNING)

54

+ SetLogLevel D-Bus call

47

** TODO Log level dbus option

48

SetLogLevel D-Bus call

55

49

** TODO Implement --foreground :BUGS:

56

50

[[info:standards:Option%20Table][Table of Long Options]]

57

51

** TODO Implement --socket

58

52

[[info:standards:Option%20Table][Table of Long Options]]

59

** TODO Date+time on console log messages :BUGS:

60

Is this the default?

61

53

** TODO [#C] DBusServiceObjectUsingSuper

62

54

** TODO [#B] Global enable/disable flag

63

** TODO [#B] By-client countdown on secrets given

55

** TODO [#B] By-client countdown on number of secrets given

64

56

** TODO [#B] Support RFC 3339 time duration syntax

65

57

** More D-Bus methods

66

58

*** NeedsPassword(50) - Timeout, default disapprove

71

63

http://0pointer.de/blog/projects/systemd.html

72

64

http://wiki.debian.org/systemd

73

65

** TODO Separate logging logic to own object

74

** TODO make clients to a dict!

75

66

** TODO [#A] Limit approval_delay to max gnutls/tls timeout value

76

67

** TODO [#B] break the wait on approval_delay if connection dies

77

68

** TODO Generate Client.runtime_expansions from client options + extra

78

69

** TODO Allow %%(checker)s as a runtime expansion

79

70

** TODO Use python-tlslite?

80

71

** TODO D-Bus AddClient() method on server object

72

** TODO Use org.freedesktop.DBus.Method.NoReply annotation on async methods.

73

** TODO Emit [[http://dbus.freedesktop.org/doc/dbus-specification.html#standard-interfaces-properties][org.freedesktop.DBus.Properties.PropertiesChanged]] signal

74

TODO Deprecate se.recompile.Mandos.Client.PropertyChanged - annotate!

75

TODO Can use "invalidates" annotation to also emit on changed secret.

76

** TODO Support [[http://dbus.freedesktop.org/doc/dbus-specification.html#standard-interfaces-objectmanager][org.freedesktop.DBus.ObjectManager]] interface on server object

77

Deprecate methods GetAllClients(), GetAllClientsWithProperties()

78

and signals ClientAdded and ClientRemoved.

81

79

82

80

* mandos.xml

83

81

** Add mandos contact info in manual pages

86

84

*** Handle "no D-Bus server" and/or "no Mandos server found" better

87

85

*** [#B] --dump option

88

86

** TODO Support RFC 3339 time duration syntax

89

** TODO Send milliseconds if bare integer is passed as time duration

90

87

91

88

* TODO mandos-dispatch

92

89

Listens for specified D-Bus signals and spawns shell commands with

97

94

** Urwid client data displayer

98

95

Better view of client data in the listing

99

96

*** Properties popup

100

** Nicer crashes. Stack traces Messes up shell.

101

*** Print a nice "We are sorry" message, save stack trace to log.

97

** Print a nice "We are sorry" message, save stack trace to log.

102

98

** Show timeout countdown for approval

103

99

104

100

* mandos-keygen