summaryrefslogtreecommitdiff
path: root/TODO
diff options
context:
space:
mode:
authorLennart Poettering <lennart@poettering.net>2020-06-02 14:56:08 +0200
committerLennart Poettering <lennart@poettering.net>2020-06-02 14:57:44 +0200
commit112bed84bffdc60db8bae2aa27b60f35d49fe7f2 (patch)
treeedbe5828f23ccbb913271589ef449e9315868a88 /TODO
parent68f6c583543eb40a541823cd6d21b5eaaf7dd7f4 (diff)
downloadsystemd-112bed84bffdc60db8bae2aa27b60f35d49fe7f2.tar.gz
update TODO
Diffstat (limited to 'TODO')
-rw-r--r--TODO7
1 files changed, 7 insertions, 0 deletions
diff --git a/TODO b/TODO
index 688fab4eb2..dd9907b2c0 100644
--- a/TODO
+++ b/TODO
@@ -62,6 +62,13 @@ Features:
operate on disk images directly. Specifically: bootctl, firstboot, tmpfiles,
sysusers, systemctl, repart, journalctl, coredumpctl.
+* seccomp: by default mask x32 ABI system wide on x86-64. it's on its way out
+
+* seccomp: don't install filters for ABIs that are masked anyway for the
+ specific service
+
+* seccomp: maybe merge all filters we install into one with that libseccomp API that allows merging.
+
* per-service credential system. Specifically: add LoadCredential= (for loading
cred from file), AcquireCredential= (for asking user for cred, via
ask-password), PassCredential= (for passing on credential systemd itself