From: Lennart Poettering Date: Wed, 4 Jun 2014 15:31:31 +0000 (+0200) Subject: update TODO X-Git-Tag: v214~82 X-Git-Url: https://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=commitdiff_plain;h=c221efb2de9a9d8500c0c6baf943bff0d8f87e7f update TODO --- diff --git a/TODO b/TODO index fb118f155..5fe1a2073 100644 --- a/TODO +++ b/TODO @@ -32,6 +32,8 @@ External: Features: +* ProtectedHome= turn into enum, and add "full" option that also marks /etc read-only + * generator that automatically discovers btrfs subvolumes, identifies their purpose based on some xattr on them. * support setting empty environment variables with Environment= and EnvironmentFile= @@ -68,10 +70,6 @@ Features: * Add timeout to early-boot, and shut down the system if it is hit. Solves the laptop-in-bag problem and is useful for embedded cases -* ImmutableSystem=yes/no or so to mount /usr, /boot read-only/invisible, and leave /var and /etc writable - -* InaccessibleHome=yes/no or so to hide /home and /run/user from a service - * Run most system services with cgroupfs read-only and procfs with a more secure mode * sd-event: generate a failure of a default event loop is executed out-of-thread @@ -552,8 +550,6 @@ Features: * introduce mix of BindTo and Requisite -* add DeleteSocketsOnStop=yes|no option to socket units - * There's currently no way to cancel fsck (used to be possible via C-c or c on the console) * add option to sockets to avoid activation. Instead just drop packets/connections, see http://cyberelk.net/tim/2012/02/15/portreserve-systemd-solution/