update TODO

diff --git a/TODO b/TODO
index a248e81c8db75467679b7b8361558697cc95f4e7..c87469a628120c214c661eeb139d7034555d0227 100644 (file)
--- a/TODO
+++ b/TODO
@@ -31,6 +31,14 @@ External:
 
 Features:
 
+* When RLIMIT_NPROC is set from a unit file it currently always is set
+  for root, not for the user set in User=, which makes it
+  useless. After fixing this, set RLIMIT_NPROC for
+  systemd-journal-xyz, and all other of our services that run under
+  their own user ids, and use User= (but only in a world where userns
+  is ubiquitous since otherwise we cannot invoke those daemons on the
+  host AND in a container anymore).
+
 * logind: maybe allow configuration of the StopTimeout for session scopes
 
 * Set NoNewPriviliges= on all of our own services, where that makes sense