update TODO

diff --git a/TODO b/TODO
index 78c3d49308a46e7148e5ed7941a07e22889b0089..c554bcfa181fe06c2dec6e0927db42cb67356ce1 100644 (file)
--- a/TODO
+++ b/TODO
@@ -24,6 +24,17 @@ Janitorial Clean-ups:
 
 Features:
 
+* be stricter with fds we receive for the fdstore: close them asynchronously
+
+* be stricter with pid file and notify pids: don't allow them to be outside of cgroup, except if sender is privileged
+
+* calenderspec: add support for week numbers and day numbers within a
+  year. This would allow us to define "bi-weekly" triggers safely.
+
+* add support for recursive bpf firewalling as supported by the newest kernel
+
+* add bpf-based implementation of devices cgroup controller logic for compat with cgroupsv2 as supported by newest kernel
+
 * implement transient socket unit.
 
 * make elogind-run create transient path and socket unit.
@@ -45,8 +56,6 @@ Features:
   the runtime dir as we maintain for the fdstore: i.e. keep it around as long
   as the unit is running or has a job queued.
 
-* hook up sd-bus' creds stuff with SO_PEERGROUPS
-
 * add async version of sd_bus_add_match and make use of that
 
 * support projid-based quota in machinectl for containers, and then drop