Thanks for the informative explanation :-) However I still stand by my argument that chrooting a service that runs as unpriveledged user helps to mitigate priveledge escalation. Zach On 7/23/05, Martin Pitt <martin.pitt at ubuntu.com> wrote: > harder. With the default Linux kernel there is no hope, though; root > is just almighty. > > Martin >