Chroot does what you'd expect of a unix chroot, though weakly, so it has holes