From: Lennart Poettering <lennart@poettering.net>
Date: Mon, 26 Nov 2018 15:18:41 +0000 (+0100)
Subject: update TODO
X-Git-Tag: v240~125^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=707b3fbd5732c630d1fd0bab6f6e5b8f7130b322;p=thirdparty%2Fsystemd.git

update TODO
---

diff --git a/TODO b/TODO
index cafd75a01da..f5c5d6cc222 100644
--- a/TODO
+++ b/TODO
@@ -23,7 +23,9 @@ Janitorial Clean-ups:
 
 Features:
 
-* when we fork off generators and such, lower LIMIT_NOFILE soft limit to 1K
+* Maybe introduce a helper safe_exec() or so, which is to execve() which
+  safe_fork() is to fork(). And then make revert the RLIMIT_NOFILE soft limit
+  to 1K implicitly, unless explicitly opted-out.
 
 * rework seccomp/nnp logic that that even if User= is used in combination with
   a seccomp option we don't have to set NNP. For that, change uid first whil