update TODO

This commit is contained in:
Lennart Poettering 2022-11-21 15:14:22 +01:00
parent a4eea6038c
commit 28795f2c13

6
TODO
View file

@ -121,6 +121,12 @@ Deprecations and removals:
Features:
* fix systemd-gpt-auto-generator in case a UKI is spawned from XBOOTLDR without
sd-boot. In that case LoaderDevicePartUUID will point to the XBOOTLDR, and we
should then derive the root disk from that, and then the ESP/XBOOTLDR from
that. Right now we will only mount ESP if it matches LoaderDEvicePartUUID
which isn't quite the same.
* maybe prohibit setuid() to the nobody user, to lock things down, via seccomp.
the nobody is not a user any code should run under, ever, as that user would
possibly get a lot of access to resources it really shouldn't be getting