X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?a=blobdiff_plain;f=TODO;h=14ed4b43ca918a0755113d845594e79ff66ec4f8;hb=eb01ba5de14859d7a94835ab9299de40132d549a;hp=8d4b937a5a505ec0d034a56594820876648ce77f;hpb=a7c54c8c1fc4101e784c101e680975f2143381ce;p=elogind.git diff --git a/TODO b/TODO index 8d4b937a5..14ed4b43c 100644 --- a/TODO +++ b/TODO @@ -29,7 +29,33 @@ Fedora 19: Features: -* maybe add "journalctl -k" as shortcut for "-b _TRANSPORT=kernel" +* libsystemd-bus: + - default policy (allow uid == 0 and our own uid) + - enforce alignment of pointers passed in + - negotiation for attach attributes + - verify that the PID doesn't change for existing busses + - when kdbus doesn't take our message without memfds, try again with memfds + - kdbus: generate correct bloom filter for matches + - implement translator service + - port systemd to new library + - implement busname unit type in systemd + - move to gvariant + - minimal locking around the memfd cache + - keep the connection fds around as long as the bus is open + - make ref counting atomic + - merge busctl into systemctl or so? + +* in the final killing spree, detect processes from the root directory, and + complain loudly if they have argv[0][0] == '@' set. + https://bugzilla.redhat.com/show_bug.cgi?id=961044 + +* read the kernel's console "debug" keyword like we read "quiet" and adjust: + systemd.log_level=debug and maybe systemd.log_target=kmsg + +* add an option to nspawn that uses seccomp to make socket(AF_NETLINK, + SOCK_RAW, NETLINK_AUDIT) fail the the appropriate error code that + makes the audit userspace to think auditing is not available in the + kernel. * Introduce a way how we can kill the main process of a service with KillSignal, but all processes with SIGKILL later on https://bugzilla.redhat.com/show_bug.cgi?id=952634 @@ -456,8 +482,6 @@ Features: * ExecOnFailure=/usr/bin/foo -* ConditionSecurity= should learn about IMA and SMACK - * udev: - remove src/udev/udev-builtin-firmware.c (CONFIG_FW_LOADER_USER_HELPER=n) - move to LGPL