Comment 4 for bug 1620442

Revision history for this message
desrt (desrt) wrote :

There is one additional problem: if this is simply a subdirectory of the user's primary XDG_RUNTIME_DIR, it opens up the chance for the snap to easily DoS the rest of the system by filling up that directory. This is why we mount a separate tmpfs for each user, for example.