X-Git-Url: https://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=TODO;h=62016e1e43f04fc9fe9147e79b565c8829557422;hp=6fa88255a7c5e065b9e5c0da07bc508663c6da1c;hb=7e853a9b9a858edbc24e6c85d134478cec840173;hpb=8060a8b32d9f0c6244dfb6814fb0e339475bcd98

diff --git a/TODO b/TODO
index 6fa88255a..62016e1e4 100644
--- a/TODO
+++ b/TODO
@@ -31,6 +31,11 @@ Features:
 * read the kernel's console "debug" keyword like we read "quiet" and adjust:
     systemd.log_level=debug and maybe systemd.log_target=kmsg
 
+* add an option to nspawn that uses seccomp to make socket(AF_NETLINK,
+  SOCK_RAW, NETLINK_AUDIT) fail the the appropriate error code that
+  makes the audit userspace to think auditing is not available in the
+  kernel.
+
 * maybe add "journalctl -k" as shortcut for "-b _TRANSPORT=kernel"
 
 * Introduce a way how we can kill the main process of a service with KillSignal, but all processes with SIGKILL later on