Re: breaking out of a chroot

[Thomas Bushnell BSG]

"Neal H. Walfield" <neal@walfield.org> writes:

> I'm not suggesting that we should fix Unix's chroot with our chroot.
> However, there are a fair number of programs (namely daemons) which
> understand the security holes and are able, nevertheless, to take
> advantages of Unix's chroot behavior.  The fact that our chroot is
> less secure than Unix's deserves, I think, at least a caveat.

Yes, that's a documentation bug.  :)  

It is possible that we should have a facility for those daemons to
use, but regardless we should make clear that the Hurd's chroot is not
a security feature.