todo docs: Integrate with host intrusion detection systems.

[libguestfs.git] / TODO

diff --git a/TODO b/TODO
index e99f7ed..2c952b5 100644 (file)
--- a/TODO
+++ b/TODO
@@ -212,16 +212,6 @@ ntfsclone
 Useful imaging tool:
 http://man.linux-ntfs.org/ntfsclone.8.html
 
-Standard images
----------------
-
-Equip guestfish with some standard images that it can load
-quickly, eg:
-
-  load ext2
-
-Maybe it's better to create these on the fly?
-
 virt-rescue pty
 ---------------
 
@@ -272,25 +262,24 @@ Mount filesystems by UUID or label.  (I'm not really sure if we can do
 this at the moment but we ought to be able to do it, and perhaps make
 it easier by having a direct command).
 
-UUencoded uploads
------------------
+Map filesystems to disk blocks
+------------------------------
 
-(Or base64).  Something like:
+Map files/filesystems/(any other object) to the actual disk
+blocks they occupy.
 
-base64-in -<<EOF
-TWFuIGlzIGRpc3Rpbmd1aXNoZWQsIG5vdCBvbmx5IGJ5IGhpcyByZWFzb24sIGJ1dCBieSB0aGlz
-IHNpbmd1bGFyIHBhc3Npb24gZnJvbSBvdGhlciBhbmltYWxzLCB3aGljaCBpcyBhIGx1c3Qgb2Yg
-dGhlIG1pbmQsIHRoYXQgYnkgYSBwZXJzZXZlcmFuY2Ugb2YgZGVsaWdodCBpbiB0aGUgY29udGlu
-dWVkIGFuZCBpbmRlZmF0aWdhYmxlIGdlbmVyYXRpb24gb2Yga25vd2xlZGdlLCBleGNlZWRzIHRo
-ZSBzaG9ydCB2ZWhlbWVuY2Ugb2YgYW55IGNhcm5hbCBwbGVhc3VyZS4=
-EOF
+And vice versa.
 
-Arbitrary scripts
------------------
+Is it even possible?
+
+Integration with host intrusion systems
+---------------------------------------
 
-debug-upload -<<EOF script
-#!/bin/sh -
-...
-EOF
+Perfect way to monitor VMs from outside the VM.  Look for file
+hashes, log events, login/logout etc.
 
-debug sh ...
+http://www.ossec.net/
+http://la-samhna.de/samhain/
+http://sourceforge.net/projects/aide/
+http://osiris.shmoo.com/
+http://sourceforge.net/projects/tripwire/