From f3ae265f5c247e172650900bd574679239be925d Mon Sep 17 00:00:00 2001
From: Lennart Poettering <lennart@poettering.net>
Date: Tue, 12 Mar 2019 15:53:05 +0100
Subject: [PATCH] update TODO

---
 TODO | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/TODO b/TODO
index 9e4e07da5e..d8e13e5e61 100644
--- a/TODO
+++ b/TODO
@@ -23,6 +23,9 @@ Janitorial Clean-ups:
 
 Features:
 
+* maybe add a seccomp-based high-level filter that blocks creation of suid/sgid
+  files.
+
 * make MAINPID= message reception checks even stricter: if service uses User=,
   then check sending UID and ignore message if it doesn't match the user or
   root.