proc filesystem lets you out of a chroot?

[Phillip Susi]

I thought that symlinks could not be followed out of a chroot, but if 
you follow /proc/1/root, you can escape from your chroot.  When open() 
finds that /proc/1/root is a symlink and restarts the name lookup with 
"/", shouldn't that start with the calling process's root and not init's?
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/