update TODO

diff --git a/TODO.md b/TODO.md
index b785ac6178cdbd82c47a01f75d83d27abae60703..61114235f32906646052c9a406d0194546c71336 100644 (file)
--- a/TODO.md
+++ b/TODO.md
@@ -132,6 +132,10 @@ SPDX-License-Identifier: LGPL-2.1-or-later
   systems for SBC. Should be doing what sysinstall does with the credentials,
   and maybe even *be* sysinstall.
 
+- make sure we always pass O_NOFOLLOW on O_CREAT
+
+- xopenat(): maybe imply O_NOFOLLOW on O_CREAT
+
 - StorageProvider interface + storagectl
   - hook-up in systemd-nspawn
   - hook-up in systemd-vmspawn