copy: only check for traversing mount points on directories

[thirdparty/systemd.git] / TODO

diff --git a/TODO b/TODO
index 5a0117260ed18d734da9616e46a268c0621a31e2..533f9d87bd5c53eb214eafb98181162292a11b26 100644 (file)
--- a/TODO
+++ b/TODO
@@ -24,9 +24,12 @@ Janitorial Clean-ups:
 
 Features:
 
-* nspawn: greater control over hostname, resolv.conf, timezone, rlim
+* Add OnTimezoneChange= and OnTimeChange= stanzas to .timer units in order to
+  schedule events based on time and timezone changes.
 
-* nspawn: when operating in a scope, also create /payload subcrgoup
+* add O_TMPFILE support to copy_file_atomic()
+
+* nspawn: greater control over selinux label?
 
 * the error paths in usbffs_dispatch_ep() leak memory
 
@@ -45,11 +48,28 @@ Features:
   that our log messages could contain clickable links for example for unit
   files and suchlike we operate on.
 
+* introduce a new SystemCallFilters= group called "@system-service" with a
+  sensible default set for system services, then make use of them in portable
+  profiles
+
+* add support for "portablectl attach http://foobar.com/waaa.raw (i.e. importd integration)
+
+* add attach --enable and attach --now (for attach+enable+start)
+
+* sync dynamic uids/gids between host+portable srvice (i.e. if DynamicUser=1 is set for a service, make sure that the
+  selected user is resolvable in the service even if it ships its own /etc/passwd)
+
 * Fix DECIMAL_STR_MAX or DECIMAL_STR_WIDTH. One includes a trailing NUL, the
   other doesn't. What a desaster. Probably to exclude it. Also
   DECIMAL_STR_WIDTH should probably add an extra "-" into account for negative
   numbers.
 
+* Check that users of inotify's IN_DELETE_SELF flag are using it properly, as
+  usually IN_ATTRIB is the right way to watch deleted files, as the former only
+  fires when a file is actually removed from disk, i.e. the link count drops to
+  zero and is not open anymore, while the latter happens when a file is
+  unlinked from any dir.
+
 * port systemctl, systemd-inhibit, busctl, … over to format-table.[ch]'s table formatters
 
 * pid1: lock image configured with RootDirectory=/RootImage= using the usual nspawn semantics while the unit is up
@@ -329,8 +349,6 @@ Features:
 * rework fopen_temporary() to make use of open_tmpfile_linkable() (problem: the
   kernel doesn't support linkat() that replaces existing files, currently)
 
-* check if DeviceAllow= should split first, resolve specifiers later
-
 * transient units: don't bother with actually setting unit properties, we
   reload the unit file anyway
 
@@ -561,7 +579,7 @@ Features:
   - document chaining of signal handler for SIGCHLD and child handlers
   - define more intervals where we will shift wakeup intervals around in, 1h, 6h, 24h, ...
   - generate a failure of a default event loop is executed out-of-thread
-  - maybe add support for inotify events
+  - maybe add support for inotify events (which we can do safely now, with O_PATH)
 
 * investigate endianness issues of UUID vs. GUID