TODO: isolate items to fix before F18

[elogind.git] / TODO

diff --git a/TODO b/TODO
index 5f6d969dfe6d774c977ed835537a2a60b6aca5f3..4d6d55afee7c0d9ab32ac8e40287f7980676e732 100644 (file)
--- a/TODO
+++ b/TODO
@@ -1,18 +1,12 @@
 Bugfixes:
 Bugfixes:

+* always open() tty6 to keep X from using it; move debug shell to tty6
+

 * there is nothing to warn about here :)
   $ systemctl stop systemd-udevd.service systemd-udevd-kernel.socket systemd-udevd-control.socket
   Warning: Stopping systemd-udevd.service, but it can still be activated by:
   systemd-udevd-control.socket
   systemd-udevd-kernel.socket
 
 * there is nothing to warn about here :)
   $ systemctl stop systemd-udevd.service systemd-udevd-kernel.socket systemd-udevd-control.socket
   Warning: Stopping systemd-udevd.service, but it can still be activated by:
   systemd-udevd-control.socket
   systemd-udevd-kernel.socket
 

-* kill /etc/timezone handling entirely? What does it provide?
-  - /etc/localtime carries the same information already:
-      $ ls -l /etc/localtime; cat /etc/timezone
-      lrwxrwxrwx 1 root root 33 Jul 27 09:55 /etc/localtime -> /usr/share/zoneinfo/Europe/Berlin
-      Europe/Berlin
-  - systemd enforces /usr to be available at bootup, so we can
-    enforce the use of the symlink
-

 * check systemd-tmpfiles for selinux context hookup for mknod(), symlink() and similar
 
 * swap units that are activated by one name but shown in the kernel under another are semi-broken
 * check systemd-tmpfiles for selinux context hookup for mknod(), symlink() and similar
 
 * swap units that are activated by one name but shown in the kernel under another are semi-broken


@@ -47,19 +41,99 @@ Bugfixes:
   by rpm, the resume path might fail, the for resume needed kernel might even be uninstalled, and
   the whole situation leads directly to data loss.
 
   by rpm, the resume path might fail, the for resume needed kernel might even be uninstalled, and
   the whole situation leads directly to data loss.
 

+F18:
+
+* journald: warn if we drop messages we forward to the syslog socket
+
+* refuse automount triggers when automount is queued for stop, much like we refuse socket triggers when sockets are queued for stop
+
+* perfomance messages for selinux are gone from debug log?
+
+* There's something wrong with escaping unit names: http://lists.freedesktop.org/archives/systemd-devel/2012-August/006292.html
+
+* wiki: document new logind LockSessions() call
+
+* wiki: document new Finished signal params
+
+* logind: different policy actions for idle, suspend, shutdown blockers: allow idle blockers by default, don't allow suspend blockers by default
+
+* selinux: merge systemd selinux access controls (dwalsh)
+
+* make logind reserve tty6 or so for text logins, so that gdm never picks it up
+

 Features:
 
 Features:
 

-* ConditionHost= for filtering services for clusters
+* make nspawn work without terminal

 
 

-* journald: add symlinks and device names to kernel messages
+* hw watchdog: optionally try to use the preset watchdog timeout instead of always overriding it

 
 

-* maybe make systemd-detect-virt suid? or use fscaps?
+* after deserializing sockets in socket.c we should reapply sockopts and things
+
+* does vasprintf advance the struct vaargs? http://pastie.org/pastes/4712773/text
+
+* do shutdown audit/utmp msgs inside of PID 1, get rid of systemd-update-utmp-runlevel
+
+* make timer units go away after they elapsed
+
+* http://lists.freedesktop.org/archives/systemd-devel/2012-September/006502.html
+
+* don't use writev() in tmpfiles for sake of compat with sysfs?
+
+* come up with a nice way to write queue/read_ahead_kb for a block device without interfering with readahead
+
+* journald: add kernel cmdline option to disable ratelimiting for debug purposes
+
+* Add a way to reference the machine/boot ID from ExecStart= and similar command lines
+
+* move PID 1 segfaults to /var/lib/systemd/coredump?
+
+* Document word splitting syntax for ExecStart= and friends
+
+* when writing journal entries order field items by their address to improve speed on rotating media
+
+* create /sbin/init symlinks from the build system
+
+* Query Paul Moore about relabelling socket fds while they are open
+
+* move keymaps to /usr/lib/... rather than /usr/lib/udev/...
+
+* journald: check whether it is OK if the client can still modify delivered journal entries
+
+* json: use jensson
+
+* json: properly serialize multiple fields with the same name per entry
+
+* journal live copy, based on libneon (client) and libmicrohttpd
+
+* document in wiki json serialization
+
+* system-wide seccomp filter

 
 

-* consider using __secure_getenv() instead of getenv() in libs
+* securityfs: don't mount in container

 
 

-* journald: automatic rekeying with no log messages doesn't appear to work
+* slave/shared remount root fs in container might clash with CAP_SYS_MOUNTS

 
 

-* man: document in ExecStart= explicitly that we don't take shell command lines, only executable names with arguments
+* ability to pass fds into systemd
+
+* system.conf should have controls for cgroups
+
+* bind mount read-only the cgroup tree higher than than nspawn
+
+* currently system services appear not to generate core dumps...
+
+* wall messages for shutdown should move to logind
+
+* allow writing multiple conditions in unit files on one line
+
+* cleanup ellipsation for log output in journalctl and systemctl status: have a sane way to disable ellipsation, and disable it by default when invoked in less/more
+
+* enforce limits on fds openened by socket units
+
+* explore multiple service instances per listening socket idea
+
+* testing tool for socket activation: some binary that listens on a socket and passes it on using the usual socket activation protocol to some server.
+
+* maybe make systemd-detect-virt suid? or use fscaps?

 
 * shutdown: don't read-only mount anything when running in container
 
 
 * shutdown: don't read-only mount anything when running in container
 


@@ -78,8 +152,6 @@ Features:
 
 * document that service reload may be implemented as service reexec
 
 
 * document that service reload may be implemented as service reexec
 

-* add option to reconfigure success exit codes/signals for services
-

 * remember which condition failed for services, not just the fact that something failed
 
 * use opterr = 0 for all getopt tools
 * remember which condition failed for services, not just the fact that something failed
 
 * use opterr = 0 for all getopt tools


@@ -92,19 +164,10 @@ Features:
 
 * add _SYSTEMD_USER_UNIT= field to journal entries
 
 
 * add _SYSTEMD_USER_UNIT= field to journal entries
 

-* remove Fedora /dev/null logic from localed.c, now that system-config-keyboard is gone
-  delete /etc/X11/xorg.conf.d/00-system-setup-keyboard.conf from spec file
-
-* journal: expose current disk usage
-

 * dracut-shutdown needs to be ordered before unmounting /boot
 
 * dracut-shutdown needs to be ordered before unmounting /boot
 

-* wiki: document new logind LockSessions() call
-

 * initialize the hostname from the fs label of /, if /etc/hostname does not exist?
 
 * initialize the hostname from the fs label of /, if /etc/hostname does not exist?
 

-* logind: different policy actions for idle, suspend, shutdown blockers: allow idle blockers by default, don't allow suspend blockers by default
-

 * install README to /etc/rc.d/init.d (if support for that is enabled) helping people who use "ls" there to figure out which services exist.
 
 * logind: ignore inactive login screens when checking whether power key should be handled
 * install README to /etc/rc.d/init.d (if support for that is enabled) helping people who use "ls" there to figure out which services exist.
 
 * logind: ignore inactive login screens when checking whether power key should be handled


@@ -123,16 +186,10 @@ Features:
 
 * logind: wakelock/opportunistic suspend support
 
 
 * logind: wakelock/opportunistic suspend support
 

-* switch-root: sockets need relabelling
-
-* segfault in journalctl during /var migration
-

 * systemd-analyze post-boot is broken for initrd
 
 * man: clarify that time-sync.target is not only sysv compat but also useful otherwise. Same for similar targets
 
 * systemd-analyze post-boot is broken for initrd
 
 * man: clarify that time-sync.target is not only sysv compat but also useful otherwise. Same for similar targets
 

-* journalctl should complain if run with uid != 0 and no persistent logs exist
-

 * .device aliases need to be implemented with the "following" logic, probably.
 
 * refuse taking lower-case variable names in sd_journal_send() and friends.
 * .device aliases need to be implemented with the "following" logic, probably.
 
 * refuse taking lower-case variable names in sd_journal_send() and friends.


@@ -178,9 +235,7 @@ Features:
 
 * systemctl: when stopping a service which has triggres and warning about it actually check the TriggeredBy= deps fields
 
 
 * systemctl: when stopping a service which has triggres and warning about it actually check the TriggeredBy= deps fields
 

-* journal: hook up with EFI firmware log, new kmsg logic
-
-* handle C-A-Del in logind, like the power/suspend buttons?
+* journal: hook up with EFI firmware log

 
 * nspawn: make use of device cgroup contrller by default
 
 
 * nspawn: make use of device cgroup contrller by default
 


@@ -194,12 +249,6 @@ Features:
         - implement .d/ auto includes for unit files
         - add syntax to reset ExecStart= lists (and similar)
 
         - implement .d/ auto includes for unit files
         - add syntax to reset ExecStart= lists (and similar)
 

-* manipulate CPU governor during boot, set it to performance
-
-* steal SBF management from the kernel
-
-* delay journal /var writeout to after boot if SBF is clean
-

 * move passno parsing to fstab generator
 
 * improve !/proc/*/loginuid situation: make /proc/*/loginuid less dependent on CONFIG_AUDIT,
 * move passno parsing to fstab generator
 
 * improve !/proc/*/loginuid situation: make /proc/*/loginuid less dependent on CONFIG_AUDIT,


@@ -235,10 +284,6 @@ Features:
 
 * Add pretty name for seats in logind
 
 
 * Add pretty name for seats in logind
 

-* nspawn wants dev_setup() for /dev/fd/ and friends?
-
-* selinux: merge systemd selinux access controls (dwalsh)
-

 * ConditionSecurity= should learn about IMA
 
 * Auke: merge Auke's bootchart
 * ConditionSecurity= should learn about IMA
 
 * Auke: merge Auke's bootchart


@@ -284,8 +329,6 @@ Features:
 
 * add command to systemctl to plot dependency graph as tree (see rhbz 795365)
 
 
 * add command to systemctl to plot dependency graph as tree (see rhbz 795365)
 

-* make logind reserve tty9 or so for text logins, so that gdm never picks it up
-

 * add option to sockets to avoid activation. Instead just drop packets/connections, see http://cyberelk.net/tim/2012/02/15/portreserve-systemd-solution/
 
 * default unix qlen is too small (10). bump sysctl? add sockopt?
 * add option to sockets to avoid activation. Instead just drop packets/connections, see http://cyberelk.net/tim/2012/02/15/portreserve-systemd-solution/
 
 * default unix qlen is too small (10). bump sysctl? add sockopt?


@@ -296,6 +339,8 @@ Features:
 
 * dbus: in fedora, make the machine a symlink to /etc/machine-id
 
 
 * dbus: in fedora, make the machine a symlink to /etc/machine-id
 

+* dbus: move dbus to early boot
+

 * journald: reuse XZ context
 
 * logind: add equivalent to sd_pid_get_owner_uid() to the D-Bus API
 * journald: reuse XZ context
 
 * logind: add equivalent to sd_pid_get_owner_uid() to the D-Bus API


@@ -314,8 +359,6 @@ Features:
 
 * journalctl: --cursor support
 
 
 * journalctl: --cursor support
 

-* systemctl status: show coredumps
-

 * save coredump in Windows/Mozilla minidump format
 
 * support crash reporting operation modes (https://live.gnome.org/GnomeOS/Design/Whiteboards/ProblemReporting)
 * save coredump in Windows/Mozilla minidump format
 
 * support crash reporting operation modes (https://live.gnome.org/GnomeOS/Design/Whiteboards/ProblemReporting)


@@ -330,9 +373,6 @@ Features:
 
 * when an instanced service exits, remove its parent cgroup too if possible.
 
 
 * when an instanced service exits, remove its parent cgroup too if possible.
 

-* if we can not get user quota for tmpfs, mount a separate tmpfs instance
-  for every user in /run/user/$USER with a configured maximum size
-

 * default to actual 32bit PIDs, via /proc/sys/kernel/pid_max
 
 * be able to specify a forced restart of service A where service B depends on, in case B
 * default to actual 32bit PIDs, via /proc/sys/kernel/pid_max
 
 * be able to specify a forced restart of service A where service B depends on, in case B


@@ -393,8 +433,6 @@ Features:
 
 * GC unreferenced jobs (such as .device jobs)
 
 
 * GC unreferenced jobs (such as .device jobs)
 

-* when failing to start a service due to ratelimiting, try again later, if restart=always is set
-

 * write blog stories about:
   - enabling dbus services
   - status update
 * write blog stories about:
   - enabling dbus services
   - status update


@@ -431,7 +469,8 @@ Features:
 
 * timer events with system resume
 
 
 * timer events with system resume
 

-* timer events on calendar time
+* timer events on calendar time:
+        maybe use this time syntax? http://ohse.de/uwe/uschedule/uschedule.html

 
 * dot output for --test showing the 'initial transaction'
 
 
 * dot output for --test showing the 'initial transaction'
 


@@ -453,8 +492,6 @@ Features:
    - bluetoothd (/var/run/sdp! @/org/bluez/audio!)
    - distccd
 
    - bluetoothd (/var/run/sdp! @/org/bluez/audio!)
    - distccd
 

-* auditd service files
-

 * fingerprint.target, wireless.target, gps.target, netdevice.target
 
 * io priority during initialization
 * fingerprint.target, wireless.target, gps.target, netdevice.target
 
 * io priority during initialization


@@ -505,6 +542,8 @@ Regularly:
 
 * set_put(), hashmap_put() return values check. i.e. == 0 doesn't free()!
 
 
 * set_put(), hashmap_put() return values check. i.e. == 0 doesn't free()!
 

+* use __secure_getenv() instead of getenv() where appropriate
+

 Scheduled for removal (or fixing):
 
 * xxxOverridable dependencies
 Scheduled for removal (or fixing):
 
 * xxxOverridable dependencies