From: Lennart Poettering <lennart@poettering.net>
Date: Tue, 2 Jun 2020 12:56:08 +0000 (+0200)
Subject: update TODO
X-Git-Tag: v246-rc1~222
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=112bed84bffdc60db8bae2aa27b60f35d49fe7f2;p=thirdparty%2Fsystemd.git

update TODO
---

diff --git a/TODO b/TODO
index 688fab4eb27..dd9907b2c0d 100644
--- a/TODO
+++ b/TODO
@@ -62,6 +62,13 @@ Features:
   operate on disk images directly. Specifically: bootctl, firstboot, tmpfiles,
   sysusers, systemctl, repart, journalctl, coredumpctl.
 
+* seccomp: by default mask x32 ABI system wide on x86-64. it's on its way out
+
+* seccomp: don't install filters for ABIs that are masked anyway for the
+  specific service
+
+* seccomp: maybe merge all filters we install into one with that libseccomp API that allows merging.
+
 * per-service credential system. Specifically: add LoadCredential= (for loading
   cred from file), AcquireCredential= (for asking user for cred, via
   ask-password), PassCredential= (for passing on credential systemd itself