X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?a=blobdiff_plain;f=TODO;h=c37b56e0c68ae3329a8a58535d2247f042e68537;hb=5f381b355a95b953654e46ba3ccdc81bdec165ea;hp=454239b9210fe97c47a6d542625ed8ee9bf03d9c;hpb=4c63a53ac5190dc8b837c15daefec5772de66bdc;p=elogind.git

diff --git a/TODO b/TODO
index 454239b92..c37b56e0c 100644
--- a/TODO
+++ b/TODO
@@ -35,8 +35,6 @@ Features:
 
 * maybe add DefaultTimerAccuracySec= as global config option to set AccuracySec='s default value in .timer units
 
-* mount /sys/fs/cgroup read-only (but leave the subdirs writable)
-
 * gpt-auto-generator:
   - Support LUKS for root devices
   - Define new partition type for encrypted swap? Support probed LUKS for encrypted swap?
@@ -49,12 +47,11 @@ Features:
 
 * support transient mount units
 
-* Imply DevicePolicy=closed and CapabilityBoundingSet=~CAP_SYS_MKNOD when PrivateDevices= is used
+* Imply DevicePolicy=closed when PrivateDevices= is used. Mount
+  pts+kdbus+shm+mqueue into /dev namespace
 
 * add an "input" group to udev logic and add all input devices to it
 
-* libsystemd-login: implement getpeer_unit(), get_peer_slice(), ...
-
 * machined: provide calls GetMachineByAddress() on the manager
   interface to get the machine for a local IP address, and
   GetAddress() on the Machine interface to get the Address for a
@@ -185,6 +182,7 @@ Features:
   - port to sd-resolve for connecting to TCP dbus servers
   - constructors for bus messages should probably not be OK with a NULL bus pointer
   - .busname units should not use get_user_creds()/get_cgroup_creds() but instead do NSS only in temporarily forked off child
+  - .busname units need settings for controlling the attached creds, and timestamps for messages queued into its names.
 
 * sd-event
   - allow multiple signal handlers per signal?