Features:
-* ProtectedHome= turn into enum, and add "full" option that also marks /etc read-only
-
* generator that automatically discovers btrfs subvolumes, identifies their purpose based on some xattr on them.
* support setting empty environment variables with Environment= and EnvironmentFile=
* tmpfiles: figure out relation between Z and m?
-* systemd-notify: fake ucred of msg to PID of parent, if that works, with fallback to our own if it doesn't.
-
* machined/machinectl: sort IP addresses we return by scope and protocol
* machined: write NSS module for looking up IP addresses for machines
* Add timeout to early-boot, and shut down the system if it is hit. Solves the laptop-in-bag problem and is useful for embedded cases
-* Run most system services with cgroupfs read-only and procfs with a more secure mode
+* Run most system services with cgroupfs read-only and procfs with a more secure mode (doesn't work, since the hidepid= option is per-pid-namespace, not per-mount)
* sd-event: generate a failure of a default event loop is executed out-of-thread
* Automatically configure swap partition to use for hibernation by looking for largest swap partition on the root disk?
-* socket-proxyd: Use sd-resolve to resolve the server address
-
* rfkill,backlight: we probably should run the load tools inside of the udev rules so that the state is properly initialized by the time other software sees it
* After coming back from hibernation reset hibernation swap partition using the /dev/snapshot ioctl APIs
ReadOnlyDirectories=... for whitelisting files for a service.
* sd-bus:
- - make AddMatch calls on dbus1 transports async
+ - make AddMatch calls on dbus1 transports async?
- when kdbus does not take our message without memfds, try again with memfds
- systemd-bus-proxyd needs to enforce good old XML policy
- - port exit-on-idle logic to byebye ioctl
- allow updating attach flags during runtime
- pid1: peek into activating message when activating a service
- introduce sd_bus_emit_object_added()/sd_bus_emit_object_removed() that automatically includes the build-in interfaces in the list
- constructors for bus messages should probably not be OK with a NULL bus pointer
- - .busname units should not use get_user_creds()/get_cgroup_creds() but instead do NSS only in temporarily forked off child
- see if we can drop more message validation on the sending side
- add API to clone sd_bus_message objects
- kdbus: matches against source or destination pids for an "strace -p"-like feel. Problem: The PID info needs to be available in userspace too...
when we start a service in order to avoid confusion when a user
assumes starting a service is enough to make it accessible
-* support User= and Group= attributes for AF_UNIX sockets. (difficult, requires NSS from PID 1?)
-
* Make it possible to set the keymap independently from the font on
the kernel cmdline. Right now setting one resets also the other.
~ianmdlvl / elogind.git / blobdiff