From: Lennart Poettering Date: Wed, 7 Sep 2022 16:17:33 +0000 (+0200) Subject: update TODO X-Git-Tag: v252-rc1~228^2~3 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=be429c8ff6389961537c8ed245f0924164c8d305;p=thirdparty%2Fsystemd.git update TODO --- diff --git a/TODO b/TODO index 8a3861c3e0f..84ed31bba91 100644 --- a/TODO +++ b/TODO @@ -119,6 +119,17 @@ Features: * Add support for extra verity configuration options to systemd-reart (FEC, hash type, etc) +* chase_symlinks(): take inspiraton from path_extract_filename() and return + O_DIRECTORY if input path contains trailing slash. + +* chase_symlinks(): refuse resolution if trailing slash is specified on input, but final node is not a directory + +* chase_symlinks(): add new flag that simply refuses all symlink use in a path, + then use that for accessing XBOOTLDR/ESP + +* document in boot loader spec that symlinks in XBOOTLDR/ESP are not OK even if + non-VFAT fs is used. + * measure credentials picked up from SMBIOS to some suitable PCR * measure GPT and LUKS headers somewhere when we use them (i.e. in