gittup/tup — comment on commit 3d7f7cf8018f0b23e6676d2790f2cc8487117c3d
File:  line 0
By anatol:

BTW on linux you just need CAP_SYS_CHROOT capability to be able to do chroot(). IMHO it is safer than using suid.