chroot


chroot by itself is not a security measure

root can always escape from the chroot
chroot without dropping root privs is useless, security-wise

a (mostly) empty chroot gives the attacker nothing to play with