todo docs: Integrate with host intrusion detection systems.

[libguestfs.git] / TODO

diff --git a/TODO b/TODO
index 56b429a..2c952b5 100644 (file)
--- a/TODO
+++ b/TODO
@@ -212,16 +212,6 @@ ntfsclone
 Useful imaging tool:
 http://man.linux-ntfs.org/ntfsclone.8.html
 
 Useful imaging tool:
 http://man.linux-ntfs.org/ntfsclone.8.html
 

-Standard images
----------------
-
-Equip guestfish with some standard images that it can load
-quickly, eg:
-
-  load ext2
-
-Maybe it's better to create these on the fly?
-

 virt-rescue pty
 ---------------
 
 virt-rescue pty
 ---------------
 


@@ -271,3 +261,25 @@ List filesystems by UUID or label.
 Mount filesystems by UUID or label.  (I'm not really sure if we can do
 this at the moment but we ought to be able to do it, and perhaps make
 it easier by having a direct command).
 Mount filesystems by UUID or label.  (I'm not really sure if we can do
 this at the moment but we ought to be able to do it, and perhaps make
 it easier by having a direct command).

+
+Map filesystems to disk blocks
+------------------------------
+
+Map files/filesystems/(any other object) to the actual disk
+blocks they occupy.
+
+And vice versa.
+
+Is it even possible?
+
+Integration with host intrusion systems
+---------------------------------------
+
+Perfect way to monitor VMs from outside the VM.  Look for file
+hashes, log events, login/logout etc.
+
+http://www.ossec.net/
+http://la-samhna.de/samhain/
+http://sourceforge.net/projects/aide/
+http://osiris.shmoo.com/
+http://sourceforge.net/projects/tripwire/