The
chroot
utility changes its current and root directories to the supplied directory
newroot
and then exec's
command
with provided arguments, if supplied,
or an interactive copy of the user's login shell.
The options are as follows:
|
| -G group[ amp;,group ...]
|
| |
Run the command with the permissions of the specified groups.
|
| -g group
|
Run the command with the permissions of the specified
group.
|
| -u user
|
Run the command as the
user.
|
| -n
|
Use the
PROC_NO_NEW_PRIVS_CTL
procctl(2)
command before chrooting, effectively disabling SUID/SGID bits
for the calling process and its descendants.
If
security.bsd.unprivileged_chroot
sysctl is set to 1, it will make it possible to chroot without
superuser privileges.
|
|
