From: Luca Boccassi <bluca@debian.org>
Date: Sat, 3 Dec 2022 11:23:00 +0000 (+0000)
Subject: Update TODO
X-Git-Tag: v253-rc1~379
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=8825e90a708a54ce202b327b93ed7e7955885dfe;p=thirdparty%2Fsystemd.git

Update TODO
---

diff --git a/TODO b/TODO
index 4af0ffcc1fb..1d4b484f7f9 100644
--- a/TODO
+++ b/TODO
@@ -963,6 +963,10 @@ Features:
   records would be stripped of all meta info, except the basic UID/name
   info. Then use this in portabled environments that do not use PrivateUsers=1.
 
+* portabled: when extracting unit files and copying to system.attached, if a
+  .p7s is available in the image, use it to protect the system.attached copy
+  with fs-verity, so that it cannot be tampered with
+
 * logind introduce two types of sessions: "heavy" and "light". The former would
   be our current sessions. But the latter would be a new type of session that
   is mostly the same but does not pull in user@.service or wait for it. Then,