Use chroot-sh chmod to remove the symlink attack vector.