X-Git-Url: https://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?a=blobdiff_plain;f=src%2Flogin%2Flogind-session.c;h=641678210fecb6c6578c0f25f04a74c7f92155c5;hb=49e942b2bc9fdedba79cd266a076ce9c9d91fc13;hp=af9c12dcd57d22c35eff72c5c500506115f4ed71;hpb=55efac6cbcea0d8edda9c6820620ceb390009e7a;p=elogind.git

diff --git a/src/login/logind-session.c b/src/login/logind-session.c
index af9c12dcd..641678210 100644
--- a/src/login/logind-session.c
+++ b/src/login/logind-session.c
@@ -28,6 +28,7 @@
 #include "logind-session.h"
 #include "strv.h"
 #include "util.h"
+#include "mkdir.h"
 #include "cgroup-util.h"
 
 #define IDLE_THRESHOLD_USEC (5*USEC_PER_MINUTE)
@@ -391,6 +392,10 @@ static int session_link_x11_socket(Session *s) {
                 return -ENOENT;
         }
 
+        /* Note that this cannot be in a subdir to avoid
+         * vulnerabilities since we are privileged but the runtime
+         * path is owned by the user */
+
         t = strappend(s->user->runtime_path, "/X11-display");
         if (!t) {
                 log_error("Out of memory");