Editing Chroot (section)

==Notable applications==
The [[Postfix (software)|Postfix]] mail transfer agent may operate as a pipeline of individually chrooted helper programs.<ref>{{cite web |title=Postfix Basic Configuration |url=https://www.postfix.org/BASIC_CONFIGURATION_README.html#chroot_setup |access-date=2025-02-17 |website=Postfix Home Page}}</ref>

Like 4.2BSD before it, the Debian and Ubuntu internal package-building farms use chroots extensively to catch unintentional build dependencies between packages. [[SUSE Linux|SUSE]] uses a similar method with its ''build'' program.  Fedora, Red Hat, and various other RPM-based distributions build all [[RPM Package Manager|RPMs]] using a chroot tool such as [http://fedoraproject.org/wiki/Projects/Mock mock].

Many [[FTP server]]s for POSIX systems use the chroot mechanism to sandbox untrusted FTP clients. This may be done by forking a process to handle an incoming connection, then chrooting the child (to avoid having to populate the chroot with libraries required for program startup).

If privilege separation is enabled, the [[OpenSSH]] daemon will chroot an unprivileged helper process into an empty directory to handle pre-authentication network traffic for each client. The daemon can also sandbox SFTP and shell sessions in a chroot (from version 4.9p1 onwards).<ref>{{cite web|title = sshd_config(5) manual page|url = https://man.openbsd.org/sshd_config.5|access-date = 2018-02-04|date = 2017-10-26|archive-date = 2018-02-05|archive-url = https://web.archive.org/web/20180205001013/https://man.openbsd.org/sshd_config.5|url-status = live}}</ref>

[[ChromeOS]] can use a chroot to run a Linux instance using [[Crouton (computing)|Crouton]],<ref>{{cite web|title=Chromium OS Universal Chroot Environment (on github)|website=[[GitHub]] |url=https://github.com/dnschneid/crouton|access-date=2016-12-17|archive-date=2016-11-25|archive-url=https://web.archive.org/web/20161125200701/https://github.com/dnschneid/crouton|url-status=live}}</ref> providing an otherwise thin OS with access to hardware resources.  The security implications related in this article apply here.