Skip to content

Commit

Permalink
README: mention that the security is not top-notch.
Browse files Browse the repository at this point in the history
  • Loading branch information
vincentbernat committed Apr 3, 2015
1 parent bc28ae7 commit 74d320e
Showing 1 changed file with 11 additions and 0 deletions.
11 changes: 11 additions & 0 deletions README.md
Expand Up @@ -39,6 +39,17 @@ from `util-linux` package.
[2]: http://lxc.sourceforge.net/
[3]: http://bugs.debian.org/637870

Security note
-------------

It should be noted that a privileged process inside jchroot may be
able to escape unless its privileges are reduced. For example, it
could fiddle with `/dev/kmem` or mount any filesystem after creating
the appropriate node.

If you seek a complex isolation, you are better off with [lxc][2]
which bundles many security mechanisms.

Installation & use
------------------

Expand Down

0 comments on commit 74d320e

Please sign in to comment.