4 ms·
chroot's only use is to make / point somewhere else, it doesn't restrict file system access except during perfect weather conditions, and even then. https://ma
by its-summertime 4y ago
chroot's only use is to make / point somewhere else, it doesn't restrict file system access except during perfect weather conditions, and even then.
https://man7.org/linux/man-pages/man2/chroot.2.html https://man7.org/linux/man-pages/man2/chroot.2.html
> This call changes an ingredient in the pathname resolution process and does nothing else. In particular, it is not intended to be used for any kind of security purpose, neither to fully sandbox a process nor to restrict filesystem system calls.
Actual restrictions are done with other methods, chroot is just to make things look nice inside the container
- cpuguy83 4y agoRuntimes typically use pivot_root and not chroot as well.