diff options
| author | David Herrmann <dh.herrmann@gmail.com> | 2014-01-05 13:59:12 +0100 |
|---|---|---|
| committer | David Herrmann <dh.herrmann@gmail.com> | 2014-01-05 13:59:12 +0100 |
| commit | e10e429f2dcbb586215e65f62847f40c7d8b5956 (patch) | |
| tree | 40160da42b660ff5c848224ca008819af37caedd /TODO | |
| parent | 479e339e5534af4c800894a553010af91f5ec8f7 (diff) | |
TODO: extend login capability note
We cannot remove CAP_SYS_ADMIN, which basically makes removing all other
capabilities useless. Anyhow, still wouldn't hurt checking whether stuff
like CAP_KILL can be dropped from logind.
Diffstat (limited to 'TODO')
| -rw-r--r-- | TODO | 1 |
1 files changed, 1 insertions, 0 deletions
@@ -86,6 +86,7 @@ Features: * given that logind now lets PID 1 do all nasty work, we can probably reduce the capability set it retains substantially. + (we need CAP_SYS_ADMIN for drmSetMaster(), so maybe not worth it) * btrfs raid assembly: some .device jobs stay stuck in the queue |