View source for Vuln kernel chroot deny unix

= Processes inside a chroot are able to chroot again  =

This vulnerability means that certain types of attacks on the kernel are possible that can lead to a complete compromise of the system.  "chroots" are ways of limiting access to the system, they are like a file system "jail".  A process can be restricted to a certain part of the filesystem, and can not access or see anything else.  

Users and processes can be placed into a chroot, which would prevent them from seeing and accessing other parts of the system.  However, if a user or process inside a "chroot" uses simply sets a new "chroot", then can "escape" the chroot they are in.

The [[ASL]] kernel contains security measures to prevent this.

If you see this vulnerability it can only be caused if you are not running the [[ASL]] kernel.