update TODO

diff --git a/TODO b/TODO
index bcbe77411c3e0f95e9470aa63751f10dde34437e..3325779eb6c5c4417639d9dd5510a9a3e04a9d51 100644 (file)
--- a/TODO
+++ b/TODO
@@ -136,6 +136,9 @@ Deprecations and removals:
 
 Features:
 
+* add ConditionSecurity=stub-measured or so that checks if we are booted with
+  systemd-stub and its measurements
+
 * sd-boot should probably measure its configuration file to PCR 5 at boot, as
   per TCG PC Client Platform Firmware Profile Spec.