Firewall Wizards: Re: chroot useful?

[Bernhard Schneck <Bernhard_Schneck () genua de>]

In message <199711132205.RAA01373 () itd nrl navy mil> you write:
> I was under the impression that running the chroot() command on a UNIX 
> box would make it impossible for all subsequently launched programs to 
> access files located above the newly defined root point, even if such 
> programs are launched with a UID of 0.  [...]
Probably most members of this list know already (or why would this
be a ``wizzards'' list :-), but the usual unix/posix system call
specifications *require* a way to break out of a chroot environment
(at least for root).

So either don't trust chroot, or don't be posix.

\Bernhard.