update TODO

[elogind.git] / TODO

diff --git a/TODO b/TODO
index 99cbb9f4fc78324c96169e1ecaf83a3cb7391f29..f94abad0e0a45abdc464975bd31ba00b1d7ac70d 100644 (file)
--- a/TODO
+++ b/TODO
@@ -47,7 +47,8 @@ Features:
 
 * support transient mount units
 
-* Imply DevicePolicy=closed and CapabilityBoundingSet=~CAP_SYS_MKNOD when PrivateDevices= is used
+* Imply DevicePolicy=closed when PrivateDevices= is used. Mount
+  pts+kdbus+shm+mqueue into /dev namespace
 
 * add an "input" group to udev logic and add all input devices to it
 
@@ -162,7 +163,6 @@ Features:
   - see if we can drop more message validation on the sending side
   - add API to clone sd_bus_message objects
   - systemd-bus-proxyd needs to enforce good old XML policy
-  - upload minimal kdbus policy into the kernel at boot
   - kdbus: matches against source or destination pids for an "strace -p"-like feel. Problem: The PID info needs to be available in userspace too...
   - longer term: priority inheritance
   - check sender of response messages