X-Git-Url: http://git.ipfire.org/?a=blobdiff_plain;f=TODO;h=57c07bea7aef04ed410d8d6fdc4fcf9c90b1e246;hb=1a31d050f26834efdd6bfc5bdd233a2ec11cf294;hp=ba6b9c034e5109d950565637e3ab470924efec76;hpb=fc23e06baa6997bdbd690e5f8359de02540adeba;p=thirdparty%2Fsystemd.git diff --git a/TODO b/TODO index ba6b9c034e5..57c07bea7ae 100644 --- a/TODO +++ b/TODO @@ -4,6 +4,11 @@ Bugfixes: manager or system manager can be always set. It would be better to reject them when parsing config. +* busctl --user call org.freedesktop.systemd1 /org/freedesktop/systemd1 org.freedesktop.systemd1.Manager GetUnitProcesses "s" run-rbff1b85427b34ba3adf864281aeda8e7.service +Failed to set address: No such file or directory + + → improve error message + External: * Fedora: add an rpmlint check that verifies that all unit files in the RPM are listed in %systemd_post macros. @@ -19,6 +24,16 @@ Janitorial Clean-ups: Features: +* when killing due to service watchdog timeout maybe detect whether target + process is under ptracing and then log loudly and continue instead. + +* introduce a new group to own TPM devices + +* make rfkill uaccess controllable by default, i.e. steal rule from + gnome-bluetooth and friends + +* warn if udev rules files are marked executable (docker?) + * tweak journald context caching. In addition to caching per-process attributes keyed by PID, cache per-cgroup attributes (i.e. the various xattrs we read) keyed by cgroup path, and guarded by ctime changes. This should provide us @@ -26,15 +41,9 @@ Features: cgroup. * clean up sleep.c: - - Use CLOCK_BOOTTIME_ALARM for waking up s2h instead of RTC ioctls - - Parse sleep.conf only once, and parse its whole contents so that we don't - have to parse it again and again in s2h - Make sure resume= and resume_offset= on the kernel cmdline always take precedence -* maybe add a seccomp-based high-level filter that blocks creation of suid/sgid - files. - * make MAINPID= message reception checks even stricter: if service uses User=, then check sending UID and ignore message if it doesn't match the user or root. @@ -65,8 +74,6 @@ Features: * bootctl,sd-boot: actually honour the "architecture" key -* set memory.oom.group in cgroup v2 for all leaf cgroups (kernel v4.19+) - * add a new syscall group "@esoteric" for more esoteric stuff such as bpf() and usefaultd() and make systemd-analyze check for it. @@ -74,8 +81,6 @@ Features: first. i.e. look for all places we use string_erase()/string_free_erase() and augment them with mlock(). Also use MADV_DONTDUMP -* whenever oom_kill memory.event event is triggered print a nice log message - * Move RestrictAddressFamily= to the new cgroup create socket * support the bind/connect/sendmsg cgroup stuff for sandboxing, and possibly @@ -144,9 +149,6 @@ Features: * When reloading configuration PID 1 should reset all its properties to the original defaults before calling parse_config() -* Add OnTimezoneChange= and OnTimeChange= stanzas to .timer units in order to - schedule events based on time and timezone changes. - * nspawn: greater control over selinux label? * hibernate/s2h: make this robust and safe to enable in Fedora by default. @@ -173,7 +175,7 @@ Features: selected user is resolvable in the service even if it ships its own /etc/passwd) * Fix DECIMAL_STR_MAX or DECIMAL_STR_WIDTH. One includes a trailing NUL, the - other doesn't. What a desaster. Probably to exclude it. Also + other doesn't. What a disaster. Probably to exclude it. Also DECIMAL_STR_WIDTH should probably add an extra "-" into account for negative numbers. @@ -202,7 +204,7 @@ Features: specific paths only like this. * add CopyFile= or so as unit file setting that may be used to copy files or - directory trees from the host to te services RootImage= and RootDirectory= + directory trees from the host to the services RootImage= and RootDirectory= environment. Which we can use for /etc/machine-id and in particular /etc/resolv.conf. Should be smart and do something useful on read-only images, for example fallback to read-only bind mounting the file instead. @@ -462,7 +464,7 @@ Features: * PID 1 should send out sd_notify("WATCHDOG=1") messages (for usage in the --user mode, and when run via nspawn) * there's probably something wrong with having user mounts below /sys, - as we have for debugfs. for exmaple, src/core/mount.c handles mounts + as we have for debugfs. for example, src/core/mount.c handles mounts prefixed with /sys generally special. http://lists.freedesktop.org/archives/systemd-devel/2015-June/032962.html @@ -524,7 +526,7 @@ Features: * systemctl: if some operation fails, show log output? -* systemctl edit: use equvalent of cat() to insert existing config as a comment, prepended with #. +* systemctl edit: use equivalent of cat() to insert existing config as a comment, prepended with #. Upon editor exit, lines with one # are removed, lines with two # are left with one #, etc. * exponential backoff in timesyncd when we cannot reach a server @@ -692,9 +694,7 @@ Features: - honor timezone efi variables for default timezone selection (if there are any?) - change bootctl to be backed by systemd-bootd to control temporary and persistent default boot goal plus efi variables * bootctl - - verify that the files boot entries point to exist - recognize the case when not booted on EFI - - specify paths for boot entries * maybe do not install getty@tty1.service symlink in /etc but in /usr? @@ -738,7 +738,7 @@ Features: - sd-journal: speed up sd_journal_get_data() with transparent hash table in bg - journald: when dropping msgs due to ratelimit make sure to write "dropped %u messages" not only when we are about to print the next - message that works, but alraedy after a short tiemout + message that works, but already after a short timeout - check if we can make journalctl by default use --follow mode inside of less if called without args? - maybe add API to send pairs of iovecs via sd_journal_send - journal: add a setgid "systemd-journal" utility to invoke from libsystemd-journal, which passes fds via STDOUT and does PK access @@ -828,9 +828,7 @@ Features: * timer units: - timer units should get the ability to trigger when: - o CLOCK_REALTIME makes jumps (TFD_TIMER_CANCEL_ON_SET) o DST changes - o timezone changes - Modulate timer frequency based on battery state * add libsystemd-password or so to query passwords during boot using the password agent logic @@ -912,8 +910,6 @@ Features: * support crash reporting operation modes (https://live.gnome.org/GnomeOS/Design/Whiteboards/ProblemReporting) -* default to actual 32-bit PIDs, via /proc/sys/kernel/pid_max - * be able to specify a forced restart of service A where service B depends on, in case B needs to be auto-respawned?