From: Daan De Meyer <daan.j.demeyer@gmail.com>
Date: Fri, 21 Nov 2025 10:44:30 +0000 (+0100)
Subject: run0: Add note about processes having privileges over --empower sessions
X-Git-Tag: v259-rc2~52
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=2691e7558bd1b605f6a837895b2a3a5f0c970242;p=thirdparty%2Fsystemd.git

run0: Add note about processes having privileges over --empower sessions
---

diff --git a/man/run0.xml b/man/run0.xml
index 01e6b4b9f72..d47adbe3262 100644
--- a/man/run0.xml
+++ b/man/run0.xml
@@ -299,6 +299,10 @@
         group as a supplemental group (for which all polkit actions are allowed by default), but other
         privileges may be granted in the future as well when using this option.</para>
 
+        <para>Note that other (unprivileged) processes of the selected user will have privileges over the
+        invoked process. Consider not using this option in an environment where there might be malicious
+        processes running as the selected user.</para>
+
         <xi:include href="version-info.xml" xpointer="v259"/></listitem>
       </varlistentry>