Paperlined.org
hosting
document updated 21 years ago, on Jun 2, 2005
UMLs can be easily put inside a chroot
the
SKAS patch
enhances security inside a UML
a couple other security items in the above link (eg. disabling /dev/mem and /dev/kmem, etc)
pre-opening files before chroot'ing allows you to use a completely empty chroot jail
(MADNESS!)
lcalls can still be used to break out into chroot jail