I think chroot <i>can</i> be used as one piece in a defense-in-depth security scheme.<p>I think it is incorrect to make a blanket statement that chroot cannot be used to increase security at all.<p>Further, I think all of the &quot;root needed&quot; exploits (most of them) are irrelevant.  If you have root, who cares about defeating a chroot on that system ?  You&#x27;re already root.<p>Finally, I note that the systems I use chroot on (FreeBSD) have almost zero vulnerability (see table on slide 27).