xref: /freebsd/contrib/openbsm/TODO (revision b626f5a73a48f44a31a200291b141e1da408a2ff)
152267f74SRobert WatsonOpenBSM TODO
252267f74SRobert Watson
3ca0716f5SRobert Watson- Build a regression test suite for libbsm that generates each token
4ca0716f5SRobert Watson  type and then compares the results with known good data.  Make sure to
5ca0716f5SRobert Watson  test that things work properly with respect to endianness of the local
6ca0716f5SRobert Watson  platform.
7ca0716f5SRobert Watson- Document contents of libbsm "public" data structures in libbsm man pages.
8ca0716f5SRobert Watson- The audit.log.5 man page is incomplete, as it does not describe all
9ca0716f5SRobert Watson  token types.
103b97a967SRobert Watson- It might be desirable to be able to provide EOPNOTSUPP system call stubs
113b97a967SRobert Watson  on systems that don't have the necessary audit system calls; that would
123b97a967SRobert Watson  allow the full libbsm and tool set to build, just not run.
13506764c6SRobert Watson- Teach praudit how to begin printing at any point in a token stream, not
14506764c6SRobert Watson  just at the beginning of a record.  This will make it easier to use
15506764c6SRobert Watson  praudit in test suites processing single-token files without header and
16506764c6SRobert Watson  trailer context.
174bd0c025SRobert Watson- Document audit_warn event arguments.
1852267f74SRobert Watson- Allow the path /etc/security to be configured at configure-time so that
1952267f74SRobert Watson  alternative locations can be used.
207a0a89d2SRobert Watson- NLS support for au_strerror(3), which provides error strings for BSM errors
217a0a89d2SRobert Watson  not available on the local OS platform.
22*aa772005SRobert Watson- Support for client certificates in auditdistd, to include certificate chain
23*aa772005SRobert Watson  validation.
24