summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorLennart Poettering <lennart@poettering.net>2021-02-15 19:23:05 +0100
committerLennart Poettering <lennart@poettering.net>2021-02-15 19:23:05 +0100
commitbf843b0bd4d60a9b75b5acec415a336f60837c64 (patch)
tree467768e2e40a6f83276434e68e258055eb9941b6
parent1edebb0b893e64ea9037e2fde3983c372e3c9005 (diff)
downloadsystemd-bf843b0bd4d60a9b75b5acec415a336f60837c64.tar.gz
update TODO
-rw-r--r--TODO7
1 files changed, 7 insertions, 0 deletions
diff --git a/TODO b/TODO
index 2080eb6b57..9b8018bf19 100644
--- a/TODO
+++ b/TODO
@@ -20,6 +20,13 @@ Janitorial Clean-ups:
Features:
+* Hook up journald's FSS logic with TPM2: seal the verification disk by
+ time-based policy, so that the verification key can remain on host and ve
+ validated via TPM.
+
+* sd-event: port to new kernel API epoll_wait2() (new in 5.11), to get more
+ accurate wait timeouts
+
* sd-boot: define a drop-in dir in the ESP that may contain X.509
certificates. If the firmware is detected to be in setup mode, automatically
enroll them as PK/KEK/db, turn off setup mode and proceed. Optionally,