TODO file
=========

- erase the PIN code in memory as soon as possible
- store the CFS passphrase in the PAM structure instead of the PIN code
- stores sst and xsst pid in /var/run/sst_lock
- remove /var/run/sst_lock if process pid no longer exist

- support file ciphering and sharing by more than one user

- support of X.509 certificates
- support of PKCS#11 tokens
- support of LDAP

Debian
======
- set flag CLOSE_SESSIONS to YES in /etc/login.defs
- do not send the PIN code in argument of cattach_SC in the PAM module
  start_session
- support a list of users not concerned by pam_smartcard.so

RedHat
======
- chmod 0666 for terminals /dev/tty8, 9 and next
- create /crypt and /.cfsfs

- add to /etc/exports
/.cfsfs localhost(rw)  # Cryptographic Filesystem export

- add to /etc/rc.local
if [ -x /usr/sbin/cfsd ]; then
	/usr/sbin/cfsd && \
	/bin/mount -o port=3049,intr localhost:/.cfsfs /crypt
fi


$Id: TODO,v 1.7 2002/03/12 13:48:14 rousseau Exp $

