[rsbac] To-Do List for 1.2.3

Amon Ott ao at rsbac.org
Thu Sep 25 13:48:26 MEST 2003


Hi folks,

this is my current to-do list for 1.2.3. Please add your wishes now. 

Finished:

- Port to 2.6.0-test
- New JAIL flag allow_clock for ntpd encapsulation

To do for 1.2.3:

- (Maybe) remove 2.2 kernel support
- More sophisticated resource control scheme
- Allow IP-list in jail, not just one IP.
- Optional RC role and type hierarchy
- RC ttl setting in menues (already displayed, but setting is a bit tricky)
- AUTH daemon for authentication enforcement
- AUTH cap inheritance from parent dir (single step only?)
- Exclude option in backup
- Clean up 2.6.0-test port, e.g. either add LSM stacking or remove LSM support
- Fix ACL menu target type selection to avoid INVALIDTARGET

To do later:

- Support more network address families with addresses etc.
- Support more network address families with NETDEV and SCD/network/firewall
- PM overhaul and menues
- (maybe) Install trace mode with automatic attribute restore (for software
  updates)
- Script log->auth cap setting
- Learning modes etc. for automatic setup script generation
- ACL support in Samba
- (maybe) Attribute set undo log in menues
- (maybe) Attribute get log in menues


Amon.
-- 
http://www.rsbac.org - GnuPG: 2048g/5DEAAA30 2002-10-22


More information about the rsbac mailing list