> Sorry, should have made things clearer. I just meant that chroot was > a bad comparison. I can't see any sane use of a tame(1) at the > moment.
No, no no, Ted's comments are completely valid. You cannot replace the narrow chroot calls in the privsep daemons with chroot(8) run externally. Any attempts to do so would degrade security. Same here with tame. Same with your pkg building tools.
