diff options
| author | Lennart Poettering <lennart@poettering.net> | 2017-09-07 20:03:55 +0200 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2017-09-22 15:28:05 +0200 |
| commit | 22c8321b09959eebe7bbbf609e9305e0d9a699b8 (patch) | |
| tree | f50cbe6aa0042bd83fa8c04e0790665c201559b6 /TODO | |
| parent | bpf: set BPF_F_ALLOW_OVERRIDE when attaching a cgroup program if Delegate=yes... (diff) | |
| download | systemd-22c8321b09959eebe7bbbf609e9305e0d9a699b8.tar.xz systemd-22c8321b09959eebe7bbbf609e9305e0d9a699b8.zip | |
update TODO
Diffstat (limited to 'TODO')
| -rw-r--r-- | TODO | 9 |
1 files changed, 9 insertions, 0 deletions
@@ -24,6 +24,15 @@ Janitorial Clean-ups: Features: +* fix logging in execute.c: extend log.c to have an optional mode where + log_open() is implicitly done before each log line and log_close() right + after. This way we don't have open fds around but logs will still + work. Because it is slow this mode should used exclusively in the execute.c + case. + +* set IPAddressDeny=any on all services that shouldn't do networking (possibly + combined with IPAddressAllow=localhost). + * dissect: when we discover squashfs, don't claim we had a "writable" partition in systemd-dissect |