* syscall filter: add knowledge about compat syscalls
+* syscall filter: don't enforce no new privs?
+
+* syscall filter: option to return EPERM rather than SIGSYS?
+
* logind: wakelock/opportunistic suspend support
* switch-root: sockets need relabelling
* refuse taking lower-case variable names in sd_journal_send() and friends.
-* Merge KillUnit()'s mode and who params into one
-
* load-fragment: when loading a unit file via a chain of symlinks
verify that it isn't masked via any of the names traversed.
* journald: we currently rotate only after MaxUse+MaxFilesize has been reached.
-* nspawn: bind mount /var/log/journal from the host
-
* Document:
- PID 1 D-Bus API