X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=TODO;h=8079a8b7a48d47e3db217cf10a5f3449e4ec472d;hp=d44320941457cefa1274dc511b12abf126d4351c;hb=dbdee28bfadd6d8bd93cb34c85ce1fc325dd8120;hpb=2a2054a796e396d1e6e679c70ac273f76ccfb39a diff --git a/TODO b/TODO index d44320941..8079a8b7a 100644 --- a/TODO +++ b/TODO @@ -29,40 +29,28 @@ External: * When lz4 gets an API for lz4 command output, make use of it to compress coredumps in a way compatible with /usr/bin/lz4. -Release 219 preparations: +Features: + +* Set NoNewPriviliges= on all of our own services, where that makes sense -* dkr import hash verification +* Rework systemctl's GetAll property parsing to use the generic bus_map_all_properties() API * rework journald sigbus stuff to use mutex -* create importd daemon, move "systemd-import" tool into machinectl +* import-dkr: support tarsum checksum verification, if it becomes reality one day... -Features: - -* import: when pulling raw images, detect NUL blocks, and create sparse files +* import-dkr: convert json bits to nspawn configuration * import: support import from local files, and export to local files -* import: add "pull-tar" support, for downloading/verifying tarballs - -* import: support compressed raw images - -* import: support verifiying raw images with gpg - * core/cgroup: support net_cls modules, and support automatically allocating class ids, then add support for making firewall changes depending on it, to implement a per-service firewall -* bus-proxy: reload policy when PID 1 reports a reload - -* the dbus1 connection user id is actually the euid, not the uid, and creds should return that - * introduce systemd-nspawn-ephemeral@.service, and hook it into "machinectl start" with a new --ephemeral switch -* logind,machined: add generic catch-all polkit verbs for most priviliged operations, similar to systemd itself +* logind,machined: add generic catch-all polkit verbs for most privileged operations, similar to systemd itself * "machinectl status" should also show internal logs of the container in question -* nspawn: don't change superblock mount options from nspawn for cgroup hierarchies - * "machinectl list-images" should show os-release data, as well as machine-info data (including deployment level) * nspawn: when start a container "foobar" look for its configuration in a file "foobar.nspawn" in /etc/systemd/nspawn/ as well as next to the actualy directory or image to boot @@ -347,7 +335,6 @@ Features: * sd-bus: - GetAllProperties() on a non-existing object does not result in a failure currently - kdbus: process fd=-1 for incoming msgs - - make dsrt happy, and change userspace header for kdbus to yyyyuta{tv}v - port to sd-resolve for connecting to TCP dbus servers - kdbus: maybe add controlling tty metadata fields - see if we can introduce a new sd_bus_get_owner_machine_id() call to retrieve the machine ID of the machine of the bus itself @@ -682,6 +669,8 @@ Features: * tmpfiles: - apply "x" on "D" too (see patch from William Douglas) + - replace F with f+. + - instead of ignoring unknown fields, reject them. * for services: do not set $HOME in services unless requested