X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?a=blobdiff_plain;f=TODO;h=fc8044b43408edb36bf20b003d8aea9b24bc8f4d;hb=ed375bebf46c1251f4baa170b39ee93761dbdb19;hp=ec067d55cd45cc1f70f3da93667afd3216852ad4;hpb=d686f034c3b9021e07faefe172ee660abd952871;p=elogind.git diff --git a/TODO b/TODO index ec067d55c..fc8044b43 100644 --- a/TODO +++ b/TODO @@ -1,7 +1,4 @@ Bugfixes: -* systemctl status *.path shows all logs, not only the ones since the unit is - active - * check systemd-tmpfiles for selinux context hookup for mknod(), symlink() and similar * swap units that are activated by one name but shown in the kernel under another are semi-broken @@ -29,6 +26,48 @@ Fedora 19: Features: +* cgroup-agent: downgrade error messages + +* document systemd-journal-flush.service properly + +* chane systemd-journal-flush into a service that stays around during + boot, and causes the journal to be moved back to /run on shutdown, + so that we don't keep /var busy. This needs to happen synchronously, + hence doing this via signals is not going to work. + +* allow implementation of InaccessibleDirectories=/ plus + ReadOnlyDirectories=... for whitelisting files for a service. + +* libsystemd-journal: + - return ECHILD as soon as somebody tries to reuse a journal object across a fork() + +* libsystemd-bus: + - default policy (allow uid == 0 and our own uid) + - enforce alignment of pointers passed in + - when kdbus doesn't take our message without memfds, try again with memfds + - implement translator service + - port systemd to new library + - implement busname unit type in systemd + - move to gvariant + - merge busctl into systemctl or so? + - synthesize sd_bus_message objects from kernel messages + - properly implement name registry ioctls for kdbus + - get rid of object hash table, use decision tree everyhwere instead? + - implement monitor logic + - object vtable logic + - longer term: + * priority queues + * priority inheritance + +* in the final killing spree, detect processes from the root directory, and + complain loudly if they have argv[0][0] == '@' set. + https://bugzilla.redhat.com/show_bug.cgi?id=961044 + +* add an option to nspawn that uses seccomp to make socket(AF_NETLINK, + SOCK_RAW, NETLINK_AUDIT) fail the the appropriate error code that + makes the audit userspace to think auditing is not available in the + kernel. + * Introduce a way how we can kill the main process of a service with KillSignal, but all processes with SIGKILL later on https://bugzilla.redhat.com/show_bug.cgi?id=952634 @@ -59,8 +98,6 @@ Features: * we need dynamic units -* add s.th. like "systemctl set-log-level debug" - * cgtop: make cgtop useful in a container * test/: @@ -80,9 +117,6 @@ Features: kmod static-nodes call kmod as an early service, and drop CAP_MKNOD from udevd.service -* systemd-delta needs to be made aware of *.d/*.conf drop-in files for - units. - * seems that when we follow symlinks to units we prefer the symlink destination path over /etc and /usr. We shouldn't do that. Instead /etc should always override /run+/usr and also any symlink @@ -202,9 +236,6 @@ Features: - pam: when leaving a session explicitly exclude the ReleaseSession() caller process from the killing spree - logind: GetSessionByPID() should accept 0 as PID value - we should probably handle SIGTERM/SIGINT to not leave dot files around, just in case - - add configuration/switches to use - freeze (http://git.kernel.org/?p=linux/kernel/git/torvalds/linux.git) and - standby (https://bugs.freedesktop.org/show_bug.cgi?id=57793) as suspend modes * exec: when deinitializating a tty device fix the perms and group, too, not only when initializing. Set access mode/gid to 0620/tty. @@ -457,8 +488,6 @@ Features: * ExecOnFailure=/usr/bin/foo -* ConditionSecurity= should learn about IMA and SMACK - * udev: - remove src/udev/udev-builtin-firmware.c (CONFIG_FW_LOADER_USER_HELPER=n) - move to LGPL