X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=TODO;h=c37b56e0c68ae3329a8a58535d2247f042e68537;hp=46ed0fad15a780fcda5a1424e61abedcbb4c088b;hb=cb9da7f24fb057813606c87f9a73fdb941baa78c;hpb=7366b080b324caf66e2ca1671f8ce7f57ace7553

diff --git a/TODO b/TODO
index 46ed0fad1..c37b56e0c 100644
--- a/TODO
+++ b/TODO
@@ -35,8 +35,6 @@ Features:
 
 * maybe add DefaultTimerAccuracySec= as global config option to set AccuracySec='s default value in .timer units
 
-* mount /sys/fs/cgroup read-only (but leave the subdirs writable)
-
 * gpt-auto-generator:
   - Support LUKS for root devices
   - Define new partition type for encrypted swap? Support probed LUKS for encrypted swap?
@@ -49,12 +47,11 @@ Features:
 
 * support transient mount units
 
-* Imply DevicePolicy=closed and CapabilityBoundingSet=~CAP_SYS_MKNOD when PrivateDevices= is used
+* Imply DevicePolicy=closed when PrivateDevices= is used. Mount
+  pts+kdbus+shm+mqueue into /dev namespace
 
 * add an "input" group to udev logic and add all input devices to it
 
-* libsystemd-login: implement getpeer_unit(), get_peer_slice(), ...
-
 * machined: provide calls GetMachineByAddress() on the manager
   interface to get the machine for a local IP address, and
   GetAddress() on the Machine interface to get the Address for a
@@ -72,11 +69,8 @@ Features:
 * "busctl status" works only as root on dbus1, since we cannot read
   /proc/$PID/exe
 
-* systemctl (and possibly related tools): support a new switch that
-  allows enumerating units in local containers recursively. "systemctl
-  list-units -R" or so should not only lists on the host, but also the
-  services in all containers in a pretty way, to give an overview of
-  the entire system.
+* systemctl: support --recursive for list-sockets, list-timers,
+  ... too, not just for list-units.
 
 * implement Distribute= in socket units to allow running multiple
   service instances processing the listening socket, and open this up
@@ -188,6 +182,7 @@ Features:
   - port to sd-resolve for connecting to TCP dbus servers
   - constructors for bus messages should probably not be OK with a NULL bus pointer
   - .busname units should not use get_user_creds()/get_cgroup_creds() but instead do NSS only in temporarily forked off child
+  - .busname units need settings for controlling the attached creds, and timestamps for messages queued into its names.
 
 * sd-event
   - allow multiple signal handlers per signal?