X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=TODO;h=d378ebb3d0600d877e4a9ea9a909fb639afdb950;hp=eaadbc3c6852b29d909f897d4b553628dc949868;hb=1810e3dc6218afd69c469cfb816254730a0ef4e3;hpb=a0e5b17733f2146d727edfdb0ebf8482a8c3bf6c

diff --git a/TODO b/TODO
index eaadbc3c6..d378ebb3d 100644
--- a/TODO
+++ b/TODO
@@ -27,10 +27,12 @@ External:
 
 Features:
 
+* mount /sys/fs/cgroup read-only (but leave the subdirs writable)
+
 * gpt-auto-generator:
-  - Define new partition type for encrypted swap
+  - Support LUKS for root devices
+  - Define new partition type for encrypted swap? Support probed LUKS for encrypted swap?
   - Make /home automount rather than mount?
-  - don't use blkid on every single partition, but on the main disk only
 
 * improve journalctl performance by loading journal files
   lazily. Encode just enough information in the file name, so that we
@@ -158,8 +160,6 @@ Features:
   Maybe take a BSD lock at the disk device node and teach udev to
   check for that and suppress event handling.
 
-* something pulls in pcre as shared object dependency into our daemons such as hostnamed.
-
 * allow implementation of InaccessibleDirectories=/ plus
   ReadOnlyDirectories=... for whitelisting files for a service.
 
@@ -178,6 +178,7 @@ Features:
        - NameLost/NameAcquired obsolete
        - GVariant
        - "const" properties (posted)
+       - path escaping
   - port exit-on-idle logic to byebye ioctl
   - update systemd.special(7) to mention that dbus.socket is only about the compatibility socket now
   - allow updating attach flags during runtime
@@ -186,6 +187,7 @@ Features:
   - introduce sd_bus_emit_object_added()/sd_bus_emit_object_removed() that automatically includes the build-in interfaces in the list
   - port to sd-resolve for connecting to TCP dbus servers
   - constructors for bus messages should probably not be OK with a NULL bus pointer
+  - .busname units should not use get_user_creds()/get_cgroup_creds() but instead do NSS only in temporarily forked off child
 
 * sd-event
   - allow multiple signal handlers per signal?
@@ -448,14 +450,12 @@ Features:
 * currently x-systemd.timeout is lost in the initrd, since crypttab is copied into dracut, but fstab isn't
 
 * nspawn:
-  - nspawn: consider changing users for -u with /usr/bin/getent, so that NSS resolving works correctly
   - nspawn: --read-only is not applied recursively to submounts
   - bind mount read-only the cgroup tree higher than nspawn
   - nspawn: make it work for dwalsh and shared /usr containers -- tmpfs mounts as command line parameters
   - refuses to boot containers without /etc/machine-id (OK?), and with empty /etc/machine-id (not OK).
   - support taking a btrfs snapshot at startup and dropping it afterwards
   - maybe: hookup nspawn and PrivateNetwork=yes with "ip netns"
-  - allow booting disk images with a GPT signature using the bootloaderspec partition uuids
   - generate predictable mac addresses for the netdev we create (host0), maybe based on guest's machine
     name and machine-id of host (?)