SGFW NG release TODO list

[dma]

• AppArmor package update with req'd policy changes for fw-daemon, tor (permission to create sockets path) - need issue for this
• Finish / fix sandbox policy implementation
• Update gtk prompter: make consistent with gnome shell dialog, add sandbox description, TLSGuard enforcement option
• Update fw-settings: add sandbox policy GUI support, add support for ALLOW_TLSONLY
• Remove "sandbox" element from parsed rules, but leave in policy (sandbox should go with exe path, and not be part of a rule line)
• Ensure logs are redacted per user choice
• Add versioning / backwards compatibility to rules parser, make sure nothing breaks at install for users
• Fix TLSGuard breaking some connections for chromium: For some websites, TLSGuard does not let chromium TLS handshake complete fw-daemon#51
• Fix obvious race condition: Prevent obvious race condition related to use of []OzInitPids fw-daemon#52
• Create ferm package with required iptables rules for fw-daemon coverage of clearnet sandbox
• Update / modify tor systemd unit file: Add creation of /var/run/tor/socket to systemd unit file fw-daemon#46
• Update handbook / documentation / website description
• Address Sublogmon, syslog, SGFW+TLS Guard & privacy #288 (optional for this release?)
• Create default policies / rules for systemwide + sandboxed apps we ship
• Fix Gnome shell fw prompt gets stuck sometimes fw-daemon#57