b7ebf97389
Resolves: RHEL-155454, RHEL-155805, RHEL-155396, RHEL-158303, RHEL-158354, RHEL-143728, RHEL-168098, RHEL-143028
53 lines
2.1 KiB
Diff
53 lines
2.1 KiB
Diff
From aedee1c91632bc2f50e23733a94f3ca106960f05 Mon Sep 17 00:00:00 2001
|
|
From: Lennart Poettering <lennart@poettering.net>
|
|
Date: Wed, 15 Jan 2025 09:44:52 +0100
|
|
Subject: [PATCH] update TODO
|
|
|
|
(cherry picked from commit 0054b7dce986b73e6cb10bf4ae51a1dd5ef57191)
|
|
|
|
Related: RHEL-143028
|
|
---
|
|
TODO | 8 --------
|
|
1 file changed, 8 deletions(-)
|
|
|
|
diff --git a/TODO b/TODO
|
|
index d6c2cef2f1..4ed9f5a834 100644
|
|
--- a/TODO
|
|
+++ b/TODO
|
|
@@ -257,10 +257,6 @@ Features:
|
|
|
|
* pcrlock: add support for multi-profile UKIs
|
|
|
|
-* logind: when logging in use new tmpfs quota support to configure quota on
|
|
- /tmp/ + /dev/shm/. But do so only in case of tmpfs, because otherwise quota
|
|
- is persistent and any persistent settings mean we don#t have to reapply them.
|
|
-
|
|
* initrd: when transitioning from initrd to host, validate that
|
|
/lib/modules/`uname -r` exists, refuse otherwise
|
|
|
|
@@ -1447,8 +1443,6 @@ Features:
|
|
|
|
* rework recursive read-only remount to use new mount API
|
|
|
|
-* PAM: pick up authentication token from credentials
|
|
-
|
|
* when mounting disk images: if IMAGE_ID/IMAGE_VERSION is set in os-release
|
|
data in the image, make sure the image filename actually matches this, so
|
|
that images cannot be misused.
|
|
@@ -1515,7 +1509,6 @@ Features:
|
|
- pass creds via keyring?
|
|
- pass creds via memfd?
|
|
- acquire + decrypt creds from pkcs11?
|
|
- - make PAMName= acquire pw via creds logic
|
|
- make macsec code in networkd read key via creds logic (copy logic from
|
|
wireguard)
|
|
- make gatewayd/remote read key via creds logic
|
|
@@ -2378,7 +2371,6 @@ Features:
|
|
- maybe make automatic, read-only, time-based reflink-copies of LUKS disk
|
|
images (and btrfs snapshots of subvolumes) (think: time machine)
|
|
- distinguish destroy / remove (i.e. currently we can unregister a user, unregister+remove their home directory, but not just remove their home directory)
|
|
- - in systemd's PAMName= logic: query passwords with ssh-askpassword, so that we can make "loginctl set-linger" mode work
|
|
- fingerprint authentication, pattern authentication, …
|
|
- make sure "classic" user records can also be managed by homed
|
|
- make size of $XDG_RUNTIME_DIR configurable in user record
|