> Some operating systems attempt to provide more secure chroot jails, but linux ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		comex on April 24, 2016 \| parent \| context \| favorite \| on: Reversing the Petya ransomware with constraint sol... > Some operating systems attempt to provide more secure chroot jails, but linux chroot() does not provide this. Note that this includes Linux itself with CLONE_NEWNS + pivot_root (which is what Docker does).

geofft on April 24, 2016 [–]

Oh! I didn't know Docker used pivot_root, and I was always curious why that call and chroot() both existed. This makes some sense.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact