update TODO

diff --git a/TODO b/TODO
index 8a0939f62967bf85cdd04c5951c6d1e466d39d42..7de470467d255d7275b0ab0327f75a7d3e2a7a93 100644 (file)
--- a/TODO
+++ b/TODO
@@ -1990,6 +1990,9 @@ Features:
   - kill scsi_id
   - add trigger --subsystem-match=usb/usb_device device
   - reimport udev db after MOVE events for devices without dev_t
+  - re-enable ProtectClock= or set CapabilityBoundingSet= to drop CAP_SYS_TIME
+    and CAP_WAKE_ALARM (and possibly other unnecessary capabilities?).
+    See f562abe2963bad241d34e0b308e48cf114672c84.
 
 * coredump:
   - save coredump in Windows/Mozilla minidump format