update TODO

diff --git a/TODO b/TODO
index b022b601ef3b7a56b4b7631643c941f6b7cba20c..cd2450165cad44de562136fed614a1d10ebd1f1f 100644 (file)
--- a/TODO
+++ b/TODO
@@ -24,6 +24,10 @@ Janitorial Clean-ups:
 
 Features:
 
+* add support for recursive bpf firewalling as supported by the newest kernel
+
+* add bpf-based implementation of devices cgroup controller logic for compat with cgroupsv2 as supported by newest kernel
+
 * implement transient socket unit.
 
 * make systemd-run create transient path and socket unit.