update TODO

diff --git a/TODO b/TODO
index 7a8747c404c16a75dcf4d458e79fe03252a7b7e5..ad9984bf7cacf309e606ef86e8b2f414ad337deb 100644 (file)
--- a/TODO
+++ b/TODO
@@ -24,9 +24,9 @@ Janitorial Clean-ups:
 
 Features:
 
-* nspawn: greater control over hostname, resolv.conf, timezone, rlim
+* add O_TMPFILE support to copy_file_atomic()
 
-* nspawn: when operating in a scope, also create /payload subcrgoup
+* nspawn: greater control over selinux label?
 
 * the error paths in usbffs_dispatch_ep() leak memory
 
@@ -329,6 +329,8 @@ Features:
 * rework fopen_temporary() to make use of open_tmpfile_linkable() (problem: the
   kernel doesn't support linkat() that replaces existing files, currently)
 
+* check if DeviceAllow= should split first, resolve specifiers later
+
 * transient units: don't bother with actually setting unit properties, we
   reload the unit file anyway
 
@@ -559,7 +561,7 @@ Features:
   - document chaining of signal handler for SIGCHLD and child handlers
   - define more intervals where we will shift wakeup intervals around in, 1h, 6h, 24h, ...
   - generate a failure of a default event loop is executed out-of-thread
-  - maybe add support for inotify events
+  - maybe add support for inotify events (which we can do safely now, with O_PATH)
 
 * investigate endianness issues of UUID vs. GUID