Chroot (was Re: Beware of Blindly Un-SHARing a File)

[ron at brl-sem.UUCP]

> I thought that chroot() caused open()s and creat()s and the like to use the
> new root, but didn't affect the interpretation of root for exec().  Anybody
> know for certain?
> 
> Also, does anybody know if there are brain-damaged implementations of chroot()
> out there?
> 
1.  CHROOT is not universal.
2.  At least 4.2 CHROOT works for any access, I'd think it would be
    more difficult to go and modify nami to do something different when
    looking up different types of objects.
3.  If you chroot, you must have an entire duplicate system under the
    new root including /etc/passwd, and all commands that might want
    to get run.
4.  I think I'll stick to busting apart files from the net with EMACS.
5.  Providing leaders the decisive edge.