> Bad code can still use the above sequence to escape after the chdir. You are mistaken, if you are talking about the Hurd. (If you are talking about some other system, then you are doing it in the wrong place.) This was previously discussed here, or perhaps it was on bug-hurd. Please look for "chroot" in the mailing list archives and read the prior discussion before attempting to recapitulate it here from the start.