diff options
| author | Lennart Poettering <lennart@poettering.net> | 2022-11-21 15:14:22 +0100 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2022-11-21 15:14:22 +0100 |
| commit | 28795f2c138203fb700fc394f0937708af886116 (patch) | |
| tree | 6e530845dd908a199a47cceaeaefc115e786f974 /TODO | |
| parent | a4eea6038c1c7f88adc6d6584d18ea60ea11b08f (diff) | |
| download | systemd-28795f2c138203fb700fc394f0937708af886116.tar.gz | |
update TODO
Diffstat (limited to 'TODO')
| -rw-r--r-- | TODO | 6 |
1 files changed, 6 insertions, 0 deletions
@@ -121,6 +121,12 @@ Deprecations and removals: Features: +* fix systemd-gpt-auto-generator in case a UKI is spawned from XBOOTLDR without + sd-boot. In that case LoaderDevicePartUUID will point to the XBOOTLDR, and we + should then derive the root disk from that, and then the ESP/XBOOTLDR from + that. Right now we will only mount ESP if it matches LoaderDEvicePartUUID + which isn't quite the same. + * maybe prohibit setuid() to the nobody user, to lock things down, via seccomp. the nobody is not a user any code should run under, ever, as that user would possibly get a lot of access to resources it really shouldn't be getting |