From bf843b0bd4d60a9b75b5acec415a336f60837c64 Mon Sep 17 00:00:00 2001 From: Lennart Poettering Date: Mon, 15 Feb 2021 19:23:05 +0100 Subject: [PATCH] update TODO --- TODO | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/TODO b/TODO index 2080eb6b57..9b8018bf19 100644 --- a/TODO +++ b/TODO @@ -20,6 +20,13 @@ Janitorial Clean-ups: Features: +* Hook up journald's FSS logic with TPM2: seal the verification disk by + time-based policy, so that the verification key can remain on host and ve + validated via TPM. + +* sd-event: port to new kernel API epoll_wait2() (new in 5.11), to get more + accurate wait timeouts + * sd-boot: define a drop-in dir in the ESP that may contain X.509 certificates. If the firmware is detected to be in setup mode, automatically enroll them as PK/KEK/db, turn off setup mode and proceed. Optionally,