Return to todo.txt CVS log

Up to [Pegasus] / pegasus / src / Executor

PEP#: 286
TITLE: Privilege Separation

DESCRIPTION: Ongoing privilege separation work.

    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

    (A) Consider getting rid of HandleRenameFileRequest().

    (A) Consider daemonizing before forking child process. Use configuration
        options (daemon=true).

    (A) Move PAM into executor process.

    (A) Test all authentication modes.

    (A) Test all OOP execution modes.

            2 - Requestor
            3 - Designated
            4 - Privileged
            5 - Server

    (A) Implement policy checks on all operations.

    (A) Logging via syslog (implement log-level option).

    (A) Implement provider policy file (from repository).

    BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB

    (B) Examine usage of functions that may create, delete, or rename files.
        (FileSystem::*, ofstream(), fopen(), open()).

    (B) Convert executor to pure C program.

    CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC

    (C) Should ExecutorClient eventually be a C program too? Perhaps it will
        be needed by CMPI?