On Wed, Nov 02, 2005 at 10:45:43AM -0500, mcr wrote:
> 
> So,
> 	chroot("/my/foo");
> 
> becomes the same as something:
> 	mount -o ro,nosuid,noexec,nodev -t union /something /my/foo
> 	chroot /my/foo
> 
> (where /something might even be /)
> 

At which point I would be worried about a privilege escalation leading
to my password database being snatched for offline cracking.  The nice
thing about chroot is that you don't have the encrypted passwords
laying about.

-- 
Brett Lymn