* Merge Distribute= patches for .socket units
-* When a Type=forking service fails and needed another service, that
- service is not cleaned up again when it has StopWhenUnneeded=yes
- http://lists.freedesktop.org/archives/systemd-devel/2013-July/012141.html
-
Features:
* maybe: hookup nspawn and PrivateNetwork=yes with "ip netns"
* rename "userspace" to "core-os"
-* syscall filter:
- - syscall filter: add knowledge about compat syscalls
- - syscall filter: don't enforce no new privs?
- - syscall filter: option to return EPERM rather than SIGSYS?
- - system-wide seccomp filter
+* syscall filter: optionally don't enforce no new privs?
* load-fragment: when loading a unit file via a chain of symlinks
verify that it isn't masked via any of the names traversed.