> Marek's loading dynamic libraries, it seems clear that the prime purpose
Does it - I can't find any evidence for that. I think you are confusing
containers and chroot. They are quite different things. A root user can
get out of a chroot a million different ways
Alan
-