[tor-commits] [tor-browser-bundle/master] Update TODO from recent fixes.

[mikeperry at torproject.org]

commit 358aa1494f5bef636a25808eebb7b7df59c33658
Author: Mike Perry <mikeperry-git at torproject.org>
Date:   Tue Jun 25 04:53:42 2013 +0400

    Update TODO from recent fixes.
---
 gitian/TODO |   27 ++++++++++-----------------
 1 file changed, 10 insertions(+), 17 deletions(-)

diff --git a/gitian/TODO b/gitian/TODO
index 59b2d4f..d54bebf 100644
--- a/gitian/TODO
+++ b/gitian/TODO
@@ -1,36 +1,29 @@
 Short Term:
- - Determinism issues
-   - One of the builds ended up using old Gitian descriptors somehow..
-     - Refuse to build if `git diff --raw` is non-zero?
-   - omni.ja (which is a zip file) still doesn't always match
-     - toolkit.manifest is sometimes reordered, which gets bundled into nonlocalized.manifest.
-       - Only two lines are ever reordered:
-         override chrome://global/content/nsTransferable.js chrome://global/content/nsDragAndDrop.js
-         skin mozapps classic/1.0 toolkit/skin/classic/mozapps/ os=WINNT osversion<6
  - Hardening options
+   - Linux:
+     - hardening-wrapper is an ubuntu package!
+       - Still misses BIND_NOW relro protection...
+     - http://wiki.debian.org/Hardening
    - Validation Tools:
      - http://www.microsoft.com/en-us/download/details.aspx?id=11910.
      - http://www.trapkit.de/tools/checksec.html
      - https://www.microsoft.com/en-us/download/details.aspx?id=29851
-   - Linux+Mac:
-     - http://wiki.debian.org/Hardening
    - Windows
      - https://developer.pidgin.im/ticket/15290
      - http://stackoverflow.com/questions/13276692/safeseh-gs-on-g
      - OpenSSL+zlib don't take cflags??
    - Can we randomize stack canaries each release, etc?
- - Windows crashes in D2D1.dll
-   - Maybe we're missing the driver blacklist from
-     https://bugzilla.mozilla.org/show_bug.cgi?id=595364
-   - Workaround: set gfx.direct2d.disabled to true for windows.
- - Custom EntryNodes issues
-   - Due to missing geoip file
+ - Determinism issues
+   - One of the builds ended up using old Gitian descriptors somehow..
+     - Refuse to build if `git diff --raw` is non-zero?
  - Detect arch on Linux
    - https://trac.torproject.org/projects/tor/ticket/3841
- - Allow people to specify NUMCPUs easier than hacking the gitian src
  - Too many libevent libs are included.. Only need a couple
 
 Mid Term:
+ - Linux:
+   - Verify nothing critical is due to expire from 'ubuntu-support-status'
+     - For now, looks like just faketime and rcv.. 
  - Windows TBB crashes if there's a system tor installed?
    - And/or if you install to c:\Program Files and run as non-Admin
  - Docs are missing