logind: extend comment about X11 socket symlink

diff --git a/src/login/logind-session.c b/src/login/logind-session.c
index af9c12dcd57d22c35eff72c5c500506115f4ed71..4e0af8656b6a570d95c0fcee501945409a1ecb13 100644 (file)
--- a/src/login/logind-session.c
+++ b/src/login/logind-session.c
@@ -391,6 +391,10 @@ static int session_link_x11_socket(Session *s) {
                 return -ENOENT;
         }
 
                 return -ENOENT;
         }
 

+        /* Note that this cannot be in a subdir to avoid
+         * vulnerabilities since we are privileged but the runtime
+         * path is owned by the user */
+

         t = strappend(s->user->runtime_path, "/X11-display");
         if (!t) {
                 log_error("Out of memory");
         t = strappend(s->user->runtime_path, "/X11-display");
         if (!t) {
                 log_error("Out of memory");