From 74d320e0e8be5bf4841156f11a1fa566b614ba60 Mon Sep 17 00:00:00 2001 From: Vincent Bernat Date: Sat, 4 Apr 2015 00:38:24 +0200 Subject: [PATCH] README: mention that the security is not top-notch. --- README.md | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/README.md b/README.md index 3bb3e0e..b6282bf 100644 --- a/README.md +++ b/README.md @@ -39,6 +39,17 @@ from `util-linux` package. [2]: http://lxc.sourceforge.net/ [3]: http://bugs.debian.org/637870 +Security note +------------- + +It should be noted that a privileged process inside jchroot may be +able to escape unless its privileges are reduced. For example, it +could fiddle with `/dev/kmem` or mount any filesystem after creating +the appropriate node. + +If you seek a complex isolation, you are better off with [lxc][2] +which bundles many security mechanisms. + Installation & use ------------------