update TODO
core: suppress gcc warnings on selinux-less systems
log: protect errno when we use assert_return()