APLawrence.com -  Resources for Unix and Linux Systems, Bloggers and the self-employed

2004/05/01 chroot

© May 2004 Tony Lawrence

Often used for security purposes (but also for convenience in testing and development and sometimes as a way to run older software), chroot establishes a new root ("/") directory for a process. As you can't ever change directories above the root, this effectively establishes a "jail" for the process, isolatiing it entirely from anything above its new root.

All necessary libraries and required files must be present below the new root: you can't just "chroot /usr/xyz" without having setup a proper structure below /usr/xyz. Usually that would not be direct copies of files like /etc/passwd and so on, but modified versions specifically for use here.

Unfortunately, "chroot" has often been broken, allowing processes to escape the jail. Sometimes the exit is as simple as doing another "chroot" command.

Got something to add? Send me email.

(OLDER)    <- More Stuff -> (NEWER)    (NEWEST)   

Printer Friendly Version

-> chroot

Inexpensive and informative Apple related e-books:

Take Control of iCloud

Take Control of Numbers

Take Control of OS X Server

Take Control of Parallels Desktop 12

Take Control of Upgrading to El Capitan

More Articles by © Tony Lawrence

Printer Friendly Version

Have you tried Searching this site?

This is a Unix/Linux resource website. It contains technical articles about Unix, Linux and general computing related subjects, opinion, news, help files, how-to's, tutorials and more.

Contact us

Printer Friendly Version

What do such machines really do? They increase the number of things we can do without thinking. Things we do without thinking — there's the real danger. (Frank Herbert)

Linux posts

Troubleshooting posts

This post tagged:


Unix/Linux Consultants

Skills Tests

Unix/Linux Book Reviews

My Unix/Linux Troubleshooting Book

This site runs on Linode