From 8ae99737831a1d4828ea434cb2f08d525e0c29a2 Mon Sep 17 00:00:00 2001
From: Luca Boccassi <luca.boccassi@gmail.com>
Date: Tue, 18 Aug 2026 19:55:29 +0100
Subject: [PATCH] man: note that overriding TTY isolation with run0 is
 discouraged

---
 man/run0.xml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/man/run0.xml b/man/run0.xml
index 1eb9905b57..6f3f959b10 100644
--- a/man/run0.xml
+++ b/man/run0.xml
@@ -65,6 +65,10 @@
     <command>run0</command> is a symbolic link to <command>systemd-run</command> executable file, and it
     behaves as <command>run0</command> if it is invoked through the symbolic link, otherwise behaves as
     <command>systemd-run</command>.</para>
+
+    <para>Note that TTY isolation as provided by the default value of the <option>--pty</option> option is a
+    core feature of <command>run0</command>. Redirecting terminals must therefore be done with care,
+    avoiding giving such control to untrusted programs.</para>
   </refsect1>
 
   <refsect1>
@@ -267,6 +271,9 @@
         <option>--no-ask-password</option> is specified in which case <option>--pty</option> is selected),
         otherwise the relevant file descriptors are passed through directly.</para>
 
+        <para>As mentioned above, TTY isolation as implemented by the default value of this option is
+        crucial for security, so care must be taken when overriding it.</para>
+
         <para id="v257"><option>--pty</option> and <option>--pipe</option> were added in v257.</para>
         <para id="v258"><option>--pty-late</option> was added in v258.</para>
         </listitem>