Chroot to 'chrootdir' after setting up tunnel about iodine HOT 3 CLOSED

The chroot operation (set with -t) is done once all the required file descriptors (mostly network sockets) are opened. Switching root to an empty directory is meant to reduce the amount of bad things that can happen if the process somehow is tricked into running malicious code. The -u flag to switch user works the same and for the same reason, to avoid having root permissions which are no longer needed.

from iodine.

Yea, I thought it was a sandboxing feature. So, should I bootstrap the directory or is it ok to just leave it completely empty?

from iodine.

Using an empty directory is best.

from iodine.