update TODO

diff --git a/TODO b/TODO
index ff63dcd28576866b62d596d741b80ada25b18359..188bff0cefadd986bc5e6bbaef57dcc7b651a9f2 100644 (file)
--- a/TODO
+++ b/TODO
@@ -19,6 +19,10 @@ F18:
 
 Features:
 
+* DeviceAllow/DeviceDeny: disallow everything by default, but whitelist /dev/zero, /dev/null and friends
+
+* service: watchdog logic: for testing purposes allow ping, but do not require pong
+
 * kill insserv code, people should really use a generator for this
 
 * journald: when dropping msgs due to ratelimit make sure to write