selinux: we don't need that many debug messages by default

[elogind.git] / TODO

diff --git a/TODO b/TODO
index f8ea2368de877e57e120e40a0dc0e3e5262ed2b2..44922db9166d75df115e1f233deb64b3fac7877b 100644 (file)
--- a/TODO
+++ b/TODO
@@ -13,21 +13,38 @@ Bugfixes:
 
 * properly handle .mount unit state tracking when two mount points are stacked one on top of another on the exact same mount point.
 
 
 * properly handle .mount unit state tracking when two mount points are stacked one on top of another on the exact same mount point.
 

-F18:
-
+Fedora 19:

 * Retest multi-seat
 
 * Retest multi-seat
 

+* create /var/log/journal/
+

 Features:
 Features:

-* turn unused sysv early-boot stuff like $local-fs, $syslog into a NOP. systemd does
-  no longer support sysv early-boot scripts, these facilities can be silently ignored

 
 

-* re-enable "make check" for gtk-doc (broken for unknown reason)
+* unify killing logic of service, socket, mount, swap units
+
+* downgrade selinux log messages
+
+* logind: document new Resume signal and UnlockSessions call in wiki
+
+* logind: when a delay lock is taken, delay method return until we are
+  out of a suspend cycle
+
+* in "loginctl seat-status" we should mark the master device with a "*" or so
+
+* if we have systemd-analyze in C "systemctl dot" should move there too

 
 

-* logind: make PrepareForSuspend(false) an official api for notification of resumes
+* fsck hookup for the ESP mount is missing

 
 

-* ExecStartPre= with an empty string should reset the list of commands to invoke
+* external: maybe it is time to patch procps so that "ps" links to
+  libsystemd-logind to print a pretty service name, seat name, session
+  name in its output. Currently it only shows cgroup membership, but
+  that's sometimes kinda hard to parse.

 
 

-* refuse instantiation of proc.mount and mount units for all other API fs
+* write man page for efi boot generator
+
+* maybe not install getty@tty1.service symlink in /etc but in /usr?
+
+* re-enable "make check" for gtk-doc (broken for unknown reason)

 
 * "systemctl disable" on a static unit prints no message and does
   nothing. "systemctl enable" does nothing, and gives a bad message
 
 * "systemctl disable" on a static unit prints no message and does
   nothing. "systemctl enable" does nothing, and gives a bad message


@@ -36,11 +53,12 @@ Features:
 * fstab: add new mount option x-systemd-after=/foobar/waldo to allow manual dependencies to other mount points
   https://bugzilla.redhat.com/show_bug.cgi?id=812826
 
 * fstab: add new mount option x-systemd-after=/foobar/waldo to allow manual dependencies to other mount points
   https://bugzilla.redhat.com/show_bug.cgi?id=812826
 

-* add "loginctl unlock-sessions" as counterpart for "loginctl lock-sessions"
-
-* extend cgroup attr dbus calls to optionally make changes persistent, and retrieve current kernel values
-
-* support high-level cgroup setting syntax in systemctl. Example: "systemctl set-cgroup-attr MemoryLimit 5K"
+* cgroup attrs:
+  - don't filter out duplicate settings
+  - support high-level cgroup setting syntax in systemctl. Example: "systemctl set-cgroup-attr MemoryLimit 5K"
+  - support writte string mapping even for non-high-level settings
+  - add man page for systemctl commands
+  - make sure we work fine with multi-line strings

 
 * print a nicer explanation if people use variable/specifier expansion in ExecStart= for the first word
 
 
 * print a nicer explanation if people use variable/specifier expansion in ExecStart= for the first word
 


@@ -48,12 +66,8 @@ Features:
 
 * mount: turn dependency information from /proc/self/mountinfo into dependency information between systemd units.
 
 
 * mount: turn dependency information from /proc/self/mountinfo into dependency information between systemd units.
 

-* udev: remove all (misguided from day 1) userspace firmware_class handling
-

 * logind: optionally, ignore idle-hint logic for autosuspend, block suspend as long as a session is around
 
 * logind: optionally, ignore idle-hint logic for autosuspend, block suspend as long as a session is around
 

-* service: when killing a service with SIGKILL always kill all processes, even if for SIGTERM we only killed the main process
-

 * exec: when deinitializating a tty device fix the perms and group, too, not only when initializing. Set access mode/gid to 0620/tty.
 
 * DeviceAllow/DeviceDeny: disallow everything by default, but whitelist /dev/zero, /dev/null and friends
 * exec: when deinitializating a tty device fix the perms and group, too, not only when initializing. Set access mode/gid to 0620/tty.
 
 * DeviceAllow/DeviceDeny: disallow everything by default, but whitelist /dev/zero, /dev/null and friends


@@ -103,24 +117,24 @@ Features:
   mode, it will never touch the RTC if the no reliable time source is active or the
   user did not request anything like it.
 
   mode, it will never touch the RTC if the no reliable time source is active or the
   user did not request anything like it.
 

-* When we begin with system shutdown all kind of suspend/hibernation should be prohibited until shutdown/reboot
-

 * When we update the kernel all kind of hibernation should be prohibited until shutdown/reboot
 
 * hwdb:
   - implement conditional properties (dmi matches)
   - hwdb --filter=ID_DRIVE_*
 * When we update the kernel all kind of hibernation should be prohibited until shutdown/reboot
 
 * hwdb:
   - implement conditional properties (dmi matches)
   - hwdb --filter=ID_DRIVE_*

-  - find out what to do for blockdevs and skipping scsi modaliases
-  - move writing code to src/libudev/libudev-hwdb-private.c

 
 

-* if booted in "quiet" mode, and an error happens, turn on status output again, so that the emergency mode isn't totally surprising
+* if booted in "quiet" mode, and an error happens, turn on status
+  output again, so that the emergency mode isn't totally
+  surprising. Also, terminate plymouth.

 
 * localectl: add listing support for X11 keymaps, by parsing /usr/share/X11/xkb/rules/xorg.lst
 
 * libunwind support for coredump pattern hook, and includes this in
   the message for coredumps. After all, libunwind is now capable to
   unwind coredumps since a few weeks ago. This probably requires that
 
 * localectl: add listing support for X11 keymaps, by parsing /usr/share/X11/xkb/rules/xorg.lst
 
 * libunwind support for coredump pattern hook, and includes this in
   the message for coredumps. After all, libunwind is now capable to
   unwind coredumps since a few weeks ago. This probably requires that

-  we have nice support for multi-line messages on display in logs-show.c.
+  we have nice support for multi-line messages on display in
+  logs-show.c. Alternatively: use libelfutil, which seems to be the
+  better supported alternative.

 
 * figure out relation of --all and --full in the various tools
 
 
 * figure out relation of --all and --full in the various tools
 


@@ -216,8 +230,6 @@ Features:
 * document that deps in [Unit] sections ignore Alias= fileds in
   [Install] units of other units, unless those units are disabled
 
 * document that deps in [Unit] sections ignore Alias= fileds in
   [Install] units of other units, unless those units are disabled
 

-* systemctl: when powering down/suspending check for inhibitors, and warn.
-

 * instantiated [Install] for target units
   https://bugs.freedesktop.org/show_bug.cgi?id=54377
 
 * instantiated [Install] for target units
   https://bugs.freedesktop.org/show_bug.cgi?id=54377
 


@@ -326,33 +338,14 @@ Features:
 
 * journald: we currently rotate only after MaxUse+MaxFilesize has been reached.
 
 
 * journald: we currently rotate only after MaxUse+MaxFilesize has been reached.
 

-* Document:
-        - PID 1 D-Bus API
-

 * introduce Type=pid-file
 
 * maybe allow services with ExecStop= set, but no ExecStart=?
 
 * introduce Type=pid-file
 
 * maybe allow services with ExecStop= set, but no ExecStart=?
 

-* efi: implement /forcefsck as uefi variables thus not requiring file system altering to trigger a file system check
-
-* efi: honor language efi variables for default language selection
-
-* efi: honor timezone efi variables for default timezone selection
-
-* efi: automatically mount EFI partition to /boot if no such entry exists in /etc/fstab and /boot is empty
-  gummiboot exports the EFI system partion (ESP) device:
-  /sys/firmware/efi/vars/LoaderDeviceIdentifier-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f/data
-  Acpi(PNP0A03,0)/Pci(1F|2)/?/HD(Part1,Sig1FCBC57F-4BFC-4C2B-91A3-9C84FBCD9AF1)
-  '/' is the separator for the device path list
-  HD(Part1,Sig1FCBC57F-4BFC-4C2B-91A3-9C84FBCD9AF1) contains the GPT UUID of the ESP
-
-* read the bootloader performance data (raw TSC) in systemd-analyze
-  /sys/firmware/efi/vars/LoaderTicksExec-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f/data
-  19066159288
-  /sys/firmware/efi/vars/LoaderTicksInit-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f/data
-  17442940316
-  /sys/firmware/efi/vars/LoaderTicksStartMenu-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f/data
-  (only set if the menu was active)
+* efi:
+  - honor language efi variables for default language selection (if there are any?)
+  - honor timezone efi variables for default timezone selection (if there are any?)
+  - introduce bootctl (backed by systemd-bootd) to control temporary and persistent default boot goal plus efi variables

 
 * change Requires=basic.target to RequisiteOverride=basic.target
 
 
 * change Requires=basic.target to RequisiteOverride=basic.target
 


@@ -366,9 +359,6 @@ Features:
 
 * readahead: when bumping /sys readahead variable save mtime and compare later to detect changes
 
 
 * readahead: when bumping /sys readahead variable save mtime and compare later to detect changes
 

-* (attempt to) make Debianites happy:
-        - add syntax to reset ExecStart= lists (and similar)
-

 * move passno parsing to fstab generator
 
 * improve !/proc/*/loginuid situation: make /proc/*/loginuid less dependent on CONFIG_AUDIT,
 * move passno parsing to fstab generator
 
 * improve !/proc/*/loginuid situation: make /proc/*/loginuid less dependent on CONFIG_AUDIT,


@@ -378,18 +368,23 @@ Features:
 
 * pam: when leaving a session explicitly exclude the ReleaseSession() caller process from the killing spree
 
 
 * pam: when leaving a session explicitly exclude the ReleaseSession() caller process from the killing spree
 

-* maybe introduce ~/.config/locale.conf and apply it within PAM
-

 * readahead: make use of EXT4_IOC_MOVE_EXT, as used by http://e4rat.sourceforge.net/
 
 * readahead: make use of EXT4_IOC_MOVE_EXT, as used by http://e4rat.sourceforge.net/
 

-* automount: implement expire
+* automount: implement expire:
+   - set superblock timeout AUTOFS_DEV_IOCTL_TIMEOUT_CMD
+   - periodically run AUTOFS_DEV_IOCTL_EXPIRE_CMD
+     - every timeout/4 (original autofs logic)
+     - blocking, needs a thread
+     - run until -EAGAIN
+   - receive expire packet on pipe if kernel tells the timeout is over
+     - call umount
+     - answer expire packet on pipe with AUTOFS_DEV_IOCTL_{READY,FAIL}_CMD
+   - AUTOFS_DEV_IOCTL_EXPIRE_CMD returns

 
 * services which create their own subcgroups break cgroup-empty notification (needs to be fixed in the kernel)
 
 * don't delete /tmp/systemd-namespace-* before a process is gone down
 
 
 * services which create their own subcgroups break cgroup-empty notification (needs to be fixed in the kernel)
 
 * don't delete /tmp/systemd-namespace-* before a process is gone down
 

-* vconsole: implement setterm -store -foreground xxx --background zzz
-

 * ExecOnFailure=/usr/bin/foo
 
 * fedora: make sshd and pam_loginuid work in nspawn containers
 * ExecOnFailure=/usr/bin/foo
 
 * fedora: make sshd and pam_loginuid work in nspawn containers


@@ -400,16 +395,12 @@ Features:
 
 * ConditionSecurity= should learn about IMA and SMACK
 
 
 * ConditionSecurity= should learn about IMA and SMACK
 

-* udev: move to LGPL
-
-* udev systemd unify:
-  - utf8 validator code
-
-* udev: scsi_id -> sg3_utils -> kill scsi_id
-
-* udev: add trigger --subsystem-match=usb/usb_device device
-
-* allow configuration of console width/height in vconsole.conf
+* udev:
+  - remove all (misguided from day 1) userspace firmware_class handling
+  - move to LGPL
+  - unify utf8 validator code with shared/
+  - kill scsi_id
+  - add trigger --subsystem-match=usb/usb_device device

 
 * cleanup syslog 'priority' vs. 'level' wording
 
 
 * cleanup syslog 'priority' vs. 'level' wording
 


@@ -439,7 +430,7 @@ Features:
 
 * figure out whether we should leave dbus around during shutdown
 
 
 * figure out whether we should leave dbus around during shutdown
 

-* dbus: in fedora, make the machine a symlink to /etc/machine-id
+* dbus: in fedora, make /var/lib/dbus/machine-id a symlink to /etc/machine-id

 
 * dbus: move dbus to early boot
 
 
 * dbus: move dbus to early boot
 


@@ -474,7 +465,7 @@ Features:
 
 * when a bus name of a service disappears from the bus make sure to queue further activation requests
 
 
 * when a bus name of a service disappears from the bus make sure to queue further activation requests
 

-* something like ConditionExec= or ExecStartPre= without failure state
+* something like ConditionExec= or ExecCondition= without failure state

 
 * tmpfiles: apply "x" on "D" too (see patch from William Douglas)
 
 
 * tmpfiles: apply "x" on "D" too (see patch from William Douglas)
 


@@ -532,7 +523,9 @@ Features:
   - how to develop against journal browsing APIs
   - the journal HTTP iface
   - non-cgroup resource management
   - how to develop against journal browsing APIs
   - the journal HTTP iface
   - non-cgroup resource management

+  - dynamic resource management with cgroups

   - refreshed, longer missions statement
   - refreshed, longer missions statement

+  - celendar time events

 
 * allow port=0 in .socket units
 
 
 * allow port=0 in .socket units