summaryrefslogtreecommitdiff
path: root/TODO
diff options
context:
space:
mode:
authorLennart Poettering <lennart@poettering.net>2023-03-14 22:36:14 +0100
committerLennart Poettering <lennart@poettering.net>2023-03-14 23:06:32 +0100
commitc1c4ecd356228319a4ac9d5573ebc1d03561d5a0 (patch)
tree82f8aeb1362a38e629d9f3a115c9469c4018224a /TODO
parenta3c3386eacb9909298cdd0ae147d1a49f617defc (diff)
downloadsystemd-c1c4ecd356228319a4ac9d5573ebc1d03561d5a0.tar.gz
update TODO
Diffstat (limited to 'TODO')
-rw-r--r--TODO5
1 files changed, 5 insertions, 0 deletions
diff --git a/TODO b/TODO
index 42334537e5..fd7c348f9a 100644
--- a/TODO
+++ b/TODO
@@ -129,6 +129,11 @@ Deprecations and removals:
Features:
+* mount /tmp/ and /var/tmp with a uidmap applied that blocks out "nobody" user
+ among other things such as dynamic uid ranges for containers and so on. That
+ way noone can create files there with these uids and we enforce they are only
+ used transiently, never persistently.
+
* set MS_NOSYMFOLLOW for ESP and XBOOTLDR mounts both in gpt-generator and in
dissect.c