Hi,

Paul,
>   Also, consider the wisdom of using chroot() at all.
>
> http://kerneltrap.org/Linux/Abusing_chroot


Of course, I know about disadvantages of using chroot(). But we're trying to
patch them as far as possible using kernel grsecurity for example. And I
know that there shouldn't be 100% trust for using chroot(). But on the other
hand, if we're using peruser to change UID/GID, we could also use chroot to
have yet another security level. And chrooting is giving some more
possibilities - individual envorinments for each user for example.

-- 
Best regards,
Pawel
_______________________________________________
Peruser mailing list
[email protected]
http://www.telana.com/mailman/listinfo/peruser

Reply via email to