exec: introduce PrivateDevices= switch to provide services with a private /dev

[elogind.git] / TODO

diff --git a/TODO b/TODO
index a567669aa70a6fad841ca22f3237db8b62129d12..621c6f2531495edde32099e3decad416e3bf289b 100644 (file)
--- a/TODO
+++ b/TODO
@@ -32,14 +32,20 @@ External:
 
 Features:
 
+* hookup nspawn and PrivateNetwork=yes with "ip netns"
+
+* socket units: support creating sockets in different namespace,
+  opening it up for JoinsNamespaceOf=. This would require to fork off
+  a tiny process that joins the namespace and creates/binds the socket
+  and passes this back to PID1 via SCM_RIGHTS. This also could be used
+  to allow Chown/chgrp on sockets without requiring NSS in PID 1.
+
 * sd-resolve:
   - make sure event loop integration works similar to event loop integration in other libs
   - maybe drop _free() call, introduce _unref() instead
-  - sd_resolve_freeanswer() is probably pointless, we don't define such a function for any other return values, but expect people to call free directly
   - maybe simplify function calls that take a sd_resolve_query object, to not also require the matching sd_resolve?
   - maybe drop the "n_proc" parameter to sd_resolve_new()?
   - change all functions to return "int" and negative errno errors
-  - getnext and getnqueries should be renamed to get_next() and get_n_queries(), i.e. functions that are not modelled directly after the libc counterparts don't need to be a single word...
 
 * New service property: maximum CPU and wallclock runtime for a service