diff options
| author | Lennart Poettering <lennart@poettering.net> | 2013-04-29 19:57:29 -0300 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2013-04-30 08:36:01 -0300 |
| commit | 5f1dac6bf605871615b35891a3966fa474db5b20 (patch) | |
| tree | 3f9a74d33e326e0060571b0a3fd1d37e10fc58e8 /TODO | |
| parent | 8973790ee6f62132b1b57de15c4edaef2c097004 (diff) | |
cryptsetup: warn if keyfiles are world-readable
Diffstat (limited to 'TODO')
| -rw-r--r-- | TODO | 6 |
1 files changed, 1 insertions, 5 deletions
@@ -158,8 +158,6 @@ Features: * use "log level" rather than "log priority" everywhere -* ensure sd_journal_seek_monotonic actually works properly. - * timedate: have global on/off switches for auto-time (NTP), and auto-timezone that connman can subscribe to. * Honour "-" prefix for InaccessibleDirectories= and ReadOnlyDirectories= to @@ -366,10 +364,10 @@ Features: - nspawn: make it work for dwalsh and shared /usr containers -- tmpfs mounts as command line parameters, selinux exec context * cryptsetup: - - cryptsetup-generator: warn if the password files are world-readable - cryptsetup-generator: allow specification of passwords in crypttab itself - move cryptsetup key caching into kernel keyctl? https://bugs.freedesktop.org/show_bug.cgi?id=54982 + - support rd.luks.allow-discards= kernel cmdline params in cryptsetup generator * move debug shell to tty6 and make sure this doesn't break the gettys on tty6 @@ -440,8 +438,6 @@ Features: * change Requires=basic.target to RequisiteOverride=basic.target -* support rd.luks.allow-discards= kernel cmdline params in cryptsetup generator - * when breaking cycles drop sysv services first, then services from /run, then from /etc, then from /usr * move passno parsing to fstab generator |