On 09/14/2015 06:49 PM, Jeff Cours wrote:
> Unfortunately, the production server already has that setting, so it's back
> to eliminating differences.
Log in to one of the chroot accounts, and while that session is open,
check all of that user's processes in /proc. Specifically, I'd check
/proc/<pid>/{root,cwd,fd}
Also check selinux enforcing on both hosts, and the SELinux attributes
of the chroot dir, its dev directory and its log socket.