update TODO

diff --git a/TODO b/TODO
index 90971fbcd0d909661f6664152d0fa68bf1abe6b1..e69cb70c1ce7d15927f77d580d91ed8eec2d43a7 100644 (file)
--- a/TODO
+++ b/TODO
@@ -132,6 +132,11 @@ Deprecations and removals:
 
 Features:
 
+* rewrite bpf-devices in libbpf/C code, rather than home-grown BPF assembly, to
+  match bpf-restrict-fs, bpf-restrict-ifaces, bpf-socket-bind
+
+* ditto: rewrite bpf-firewall in libbpf/C code
+
 * extend the smbios11 logic for passing credentials so that instead of passing
   the credential data literally it can also just reference an AF_VSOCK CID/port
   to read them from. This way the data doesn't remain in the SMBIOS blob during