On Mon, 2012-01-30 at 14:43 -0800, Andy Lutomirski wrote: > You don't need a setuid binary. Just have an initscript set up the bind mounts. The point is that dchroot is already setuid root, and calls chroot, so it gains nothing from the ability to do it unprivileged. (And wow, I just looked at the source, it's a setuid C++ binary! Using boost. Ugh...) -- To unsubscribe from this list: send the line "unsubscribe linux-fsdevel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
