chroot'ed demon process

[Johannes Stezenbach]

Michael Ströder <michael at stroeder.com> wrote:
>Is it possible to call a chroot() in a demon process running under
>Python after reading all configuration data?

If python would have a chroot(), you would either have to call it
after any modules have been imported or make the Python library
and any shared libraries and support files needed for them
available in the chroot "jail". You cannot access files outside of
the chroot environment (that's the whole point of chroot).

Swigging chroot() or adding it to module posix would be trivial.

Have you read the "Secure UNIX Programming FAQ" at
http://www.whitefang.com/sup/ ?

Also see the chroot utility:
man 1 chroot
info chroot

Johannes