diff --git a/man/run0.xml b/man/run0.xml index 1eb9905b57..6f3f959b10 100644 --- a/man/run0.xml +++ b/man/run0.xml @@ -65,6 +65,10 @@ run0 is a symbolic link to systemd-run executable file, and it behaves as run0 if it is invoked through the symbolic link, otherwise behaves as systemd-run. + + Note that TTY isolation as provided by the default value of the option is a + core feature of run0. Redirecting terminals must therefore be done with care, + avoiding giving such control to untrusted programs. @@ -267,6 +271,9 @@ is specified in which case is selected), otherwise the relevant file descriptors are passed through directly. + As mentioned above, TTY isolation as implemented by the default value of this option is + crucial for security, so care must be taken when overriding it. + and were added in v257. was added in v258.