update TODO

diff --git a/TODO b/TODO
index c75f69e650eea7e5adeb936784e43463a6070ad6..d74daa0663cd09d124bee9caebefe5239a6ca895 100644 (file)
--- a/TODO
+++ b/TODO
@@ -132,6 +132,17 @@ Deprecations and removals:
 
 Features:
 
+* Add an alias to systemd-run maybe called "uid0" or so, which tries to mimic
+  the sudo/su command lines to some level, but is backed by transient services,
+  and proper security isolate/tty forwarding. This would then allow us to run
+  systems with NNP turned on reasonably nicely. To make this extra nice and
+  pretty, in ptyfwd rewrite every NL we pass through so that it resets the bg
+  color to some reddish tone, and erase the whole coming line first, so that
+  the background color indicates when operating with privileges and when not.
+
+* use udev rule networkd ownership property to take ownership of network
+  interfaces nspawn creates
+
 * add a kernel cmdline switch (and cred?) for marking a system to be
   "headless", in which case we never open /dev/console for reading, only for
   writing. This would then mean: systemd-firstboot would process creds but not