diff options
author | Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> | 2019-12-05 10:31:55 +0100 |
---|---|---|
committer | Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> | 2019-12-05 10:35:32 +0100 |
commit | 5ebbb45bdee9b828982e79cf6f8ec5db96c8830c (patch) | |
tree | c038307934203f02cbec40a756610021c96e9316 /TODO | |
parent | Fix use of unitialized variable in error path (diff) | |
download | systemd-5ebbb45bdee9b828982e79cf6f8ec5db96c8830c.tar.xz systemd-5ebbb45bdee9b828982e79cf6f8ec5db96c8830c.zip |
TODO: remove obsolete entries
"introspect" is well established and OK. We shouldn't change it at this point.
Diffstat (limited to 'TODO')
-rw-r--r-- | TODO | 8 |
1 files changed, 1 insertions, 7 deletions
@@ -378,8 +378,6 @@ Features: * show whether a service has out-of-date configuration in "systemctl status" by using mtime data of ConfigurationDirectory=. -* replace all remaining uses of fgets() + LINE_MAX by read_line() - * Add AddUser= setting to unit files, similar to DynamicUser=1 which however creates a static, persistent user rather than a dynamic, transient user. We can leverage code from sysusers.d for this. @@ -460,8 +458,6 @@ Features: * define gpt header bits to select volatility mode -* ProtectKernelLogs= (drops CAP_SYSLOG, add seccomp for syslog() syscall, and DeviceAllow to /dev/kmsg) in service files - * ProtectClock= (drops CAP_SYS_TIMES, adds seecomp filters for settimeofday, adjtimex), sets DeviceAllow o /dev/rtc * ProtectTracing= (drops CAP_SYS_PTRACE, blocks ptrace syscall, makes /sys/kernel/tracing go away) @@ -519,7 +515,7 @@ Features: * when we detect that there are waiting jobs but no running jobs, do something -* push CPUAffinity= also into the "cpuset" cgroup controller (only after the cpuset controller got ported to the unified hierarchy) +* push CPUAffinity= also into the "cpuset" cgroup controller * PID 1 should send out sd_notify("WATCHDOG=1") messages (for usage in the --user mode, and when run via nspawn) @@ -580,8 +576,6 @@ Features: * what to do about udev db binary stability for apps? (raw access is not an option) -* man: maybe use the word "inspect" rather than "introspect"? - * systemctl: if some operation fails, show log output? * systemctl edit: use equivalent of cat() to insert existing config as a comment, prepended with #. |