update TODO

diff --git a/TODO b/TODO
index 6bfaa599fafd5d2920950183e1645d1fc6730052..744982e7daf1d3a1e912ee1730d8463de790d640 100644 (file)
--- a/TODO
+++ b/TODO
@@ -32,6 +32,14 @@ External:
 
 Features:
 
 
 Features:
 

+* sd-resolve: add callback api
+
+* ImmutableSystem=yes/no or so to mount /usr, /boot read-only/invisible, and leave /var and /etc writable
+
+* InaccessibleHome=yes/no or so to hide /home and /run/user from a service
+
+* Run most system services with cgroupfs read-only and procfs with a more secure mode
+

 * sd-event: generate a failure of a default event loop is executed out-of-thread
 
 * add "M" as recursive version of "m" to tmpfiles, then use it for
 * sd-event: generate a failure of a default event loop is executed out-of-thread
 
 * add "M" as recursive version of "m" to tmpfiles, then use it for