I think chroot can be used as one piece in a defense-in-depth security scheme. I think it is incorrect to make a blanket statement that chroot cannot be used t

I think chroot can be used as one piece in a defense-in-depth security scheme. I think it is incorrect to make a blanket statement that chroot cannot be used to increase security at all. Further, I think all of the "root needed" exploits (most of them) are irrelevant. If you have root, who cares about defeating a chroot on that system ? You're already root. Finally, I note that the systems I use chroot on (FreeBSD) have almost zero vulnerability (see table on slide 27).