update TODO

diff --git a/TODO b/TODO
index 010c2ad41d9140b5ee8ca05a74832af58d8bd22e..663e4fedd8929b2fcaefab13d2a9b825c799c43a 100644 (file)
--- a/TODO
+++ b/TODO
@@ -32,9 +32,6 @@ Features:
   - Make sure resume= and resume_offset= on the kernel cmdline always take
     precedence
 
-* maybe add a seccomp-based high-level filter that blocks creation of suid/sgid
-  files.
-
 * make MAINPID= message reception checks even stricter: if service uses User=,
   then check sending UID and ignore message if it doesn't match the user or
   root.