From 11fb37f16ed99c1603c9d770b60ce4953b96a58d Mon Sep 17 00:00:00 2001
From: Lennart Poettering <lennart@poettering.net>
Date: Sun, 13 Apr 2014 17:41:51 -0700
Subject: [PATCH] update TODO

---
 TODO | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/TODO b/TODO
index 6bfaa599fa..744982e7da 100644
--- a/TODO
+++ b/TODO
@@ -32,6 +32,14 @@ External:
 
 Features:
 
+* sd-resolve: add callback api
+
+* ImmutableSystem=yes/no or so to mount /usr, /boot read-only/invisible, and leave /var and /etc writable
+
+* InaccessibleHome=yes/no or so to hide /home and /run/user from a service
+
+* Run most system services with cgroupfs read-only and procfs with a more secure mode
+
 * sd-event: generate a failure of a default event loop is executed out-of-thread
 
 * add "M" as recursive version of "m" to tmpfiles, then use it for