1 files changed, 4 insertions, 0 deletions
diff --git a/TODO b/TODO
index 27fc5a3a4f..9d09916b28 100644
--- a/TODO
+++ b/TODO
@@ -40,6 +40,10 @@ Features:
 
 * syscall filter: add knowledge about compat syscalls
 
+* syscall filter: don't enforce no new privs?
+
+* syscall filter: option to return EPERM rather than SIGSYS?
+
 * logind: wakelock/opportunistic suspend support
 
 * switch-root: sockets need relabelling