From 8cfde28b610c7fd54b16b68d5a99d4d036b99a59 Mon Sep 17 00:00:00 2001
From: Yu Watanabe <watanabe.yu+github@gmail.com>
Date: Fri, 16 Sep 2022 04:18:58 +0900
Subject: [PATCH] update TODO

---
 TODO | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/TODO b/TODO
index 8a0939f6296..7de470467d2 100644
--- a/TODO
+++ b/TODO
@@ -1990,6 +1990,9 @@ Features:
   - kill scsi_id
   - add trigger --subsystem-match=usb/usb_device device
   - reimport udev db after MOVE events for devices without dev_t
+  - re-enable ProtectClock= or set CapabilityBoundingSet= to drop CAP_SYS_TIME
+    and CAP_WAKE_ALARM (and possibly other unnecessary capabilities?).
+    See f562abe2963bad241d34e0b308e48cf114672c84.
 
 * coredump:
   - save coredump in Windows/Mozilla minidump format
-- 
2.47.3