summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDavid Herrmann <dh.herrmann@gmail.com>2014-01-05 13:59:12 +0100
committerDavid Herrmann <dh.herrmann@gmail.com>2014-01-05 13:59:12 +0100
commite10e429f2dcbb586215e65f62847f40c7d8b5956 (patch)
tree40160da42b660ff5c848224ca008819af37caedd
parent479e339e5534af4c800894a553010af91f5ec8f7 (diff)
TODO: extend login capability note
We cannot remove CAP_SYS_ADMIN, which basically makes removing all other capabilities useless. Anyhow, still wouldn't hurt checking whether stuff like CAP_KILL can be dropped from logind.
-rw-r--r--TODO1
1 files changed, 1 insertions, 0 deletions
diff --git a/TODO b/TODO
index df578808c6..0e9a01d492 100644
--- a/TODO
+++ b/TODO
@@ -86,6 +86,7 @@ Features:
* given that logind now lets PID 1 do all nasty work, we can
probably reduce the capability set it retains substantially.
+ (we need CAP_SYS_ADMIN for drmSetMaster(), so maybe not worth it)
* btrfs raid assembly: some .device jobs stay stuck in the queue