system/systemd
system/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd synced 2024-07-08 20:15:55 +00:00
Code Issues Projects Releases Wiki Activity

TODO: note cgroup.kill and memfd_secret

Browse Source
This commit is contained in:
Luca Boccassi 2021-07-12 22:47:59 +01:00
parent b1f8d02557
commit 8b213bf12e
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
TODO
View File

@ -262,6 +262,8 @@ Features:
* pid1: support new clone3() fork-into-cgroup feature
* pid1: support new cgroup.kill to terminate all processes in a cgroup
* pid1: also remove PID files of a service when the service starts, not just
when it exits
@ -425,6 +427,7 @@ Features:
* paranoia: whenever we process passwords, call mlock() on the memory
first. i.e. look for all places we use free_and_erasep() and
augment them with mlock(). Also use MADV_DONTDUMP.
Alternatively (preferably?) use memfd_secret().
* Move RestrictAddressFamily= to the new cgroup create socket