X-Git-Url: https://codewiz.org/gitweb?a=blobdiff_plain;f=doc%2FTODO;h=e1e90f0ec84994a02ff060e4fe81250f6ec43a43;hb=91bf57bac7bed32937c13595044158007e7b5812;hp=4f32bb065727653c0fa8c83dceb6bb7e69bb1bec;hpb=3cea2ab969f54fc33ed238c5b326fb3868392a15;p=monkeysphere.git diff --git a/doc/TODO b/doc/TODO index 4f32bb0..e1e90f0 100644 --- a/doc/TODO +++ b/doc/TODO @@ -114,7 +114,7 @@ File bug against seahorse about how, when creating new primary keys, File bug against enigmail about lack of ability to create subkeys. -Priviledge separation: monkeysphere user to handle authn keyring and +Privilege separation: monkeysphere user to handle authn keyring and generate authorized_keys file (which would be moved into place by root). Host keyring would be owned by root. @@ -122,3 +122,14 @@ Check permissions of authorized_user_ids file to be writable only by user and root (same as authorized_keys) Improve function that sets owner trust for keys in server keychain. + +Test and document what happens when any filesystem that the + monkeysphere-server relies on and modifies (/tmp, /etc, and /var?) + fills up. + +Consider moving monkeysphere-managed files (gpg homedirs? temporary + files?) into /var. + +Optimize keyserver access, particularly on monkeysphere-server + update-users -- is there a way to query the keyserver all in a + chunk?