> >Maybe policy-rc.d could help. I have some differences between the real > >system and the chroot. So policy-rc.d can decide if it was started within > >the chroot and deny the start. > > Which package provides that? I suppose, only on unstable? No package provides that. It is documented in invoke-rc.d manual page. Available since 3.0, apparently. regards, junichi