From: David Herrmann <dh.herrmann@gmail.com>
Date: Sun, 5 Jan 2014 12:59:12 +0000 (+0100)
Subject: TODO: extend login capability note
X-Git-Tag: v209~535
X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=commitdiff_plain;h=e10e429f2dcbb586215e65f62847f40c7d8b5956;hp=479e339e5534af4c800894a553010af91f5ec8f7

TODO: extend login capability note

We cannot remove CAP_SYS_ADMIN, which basically makes removing all other
capabilities useless. Anyhow, still wouldn't hurt checking whether stuff
like CAP_KILL can be dropped from logind.
---

diff --git a/TODO b/TODO
index df578808c..0e9a01d49 100644
--- a/TODO
+++ b/TODO
@@ -86,6 +86,7 @@ Features:
 
 * given that logind now lets PID 1 do all nasty work, we can
   probably reduce the capability set it retains substantially.
+  (we need CAP_SYS_ADMIN for drmSetMaster(), so maybe not worth it)
 
 * btrfs raid assembly: some .device jobs stay stuck in the queue