Interesting discussion:<p><a href="https:&#x2F;&#x2F;lwn.net&#x2F;Articles&#x2F;252794&#x2F;" rel="nofollow">https:&#x2F;&#x2F;lwn.net&#x2F;Articles&#x2F;252794&#x2F;</a><p>which links to here:<p><a href="http:&#x2F;&#x2F;web.archive.org&#x2F;web&#x2F;20071011110715&#x2F;http:&#x2F;&#x2F;kerneltrap.org&#x2F;Linux&#x2F;Abusing_chroot" rel="nofollow">http:&#x2F;&#x2F;web.archive.org&#x2F;web&#x2F;20071011110715&#x2F;http:&#x2F;&#x2F;kerneltrap....</a><p>which further makes the point that chroot is not now and has never been a member of the &quot;security tool&quot; universe.<p>AIUI, containers <i>are</i> meant to be secure against processes (and, therefore, users) that want to get out, so if you care about that, use those, instead.