* doc/coreutils.texi (chroot invocation): State that --userspace and
--groups do not provide any real extra protection when working with
untrusted chroots.
---
doc/coreutils.texi | 2 ++
1 file changed, 2 insertions(+)
diff --git a/doc/coreutils.texi b/doc/coreutils.texi
index 44d16fe20..15eaef800 100644
--- a/doc/coreutils.texi
+++ b/doc/coreutils.texi
@@ -17390,6 +17390,8 @@ and therefore is mostly useful together with the
@option{--groups} and
The user and group name look-up performed by the @option{--userspec}
and @option{--groups} options, is done both outside and inside
the chroot, with successful look-ups inside the chroot taking precedence.
+These options should not be relied on as a mechanism to drop privileges
+when working with untrusted @var{newroot}s.
If the specified user or group items are intended to represent a numeric ID,
then a name to ID resolving step is avoided by specifying a leading @samp{+}.
@xref{Disambiguating names and IDs}.
--
2.56.0
