use CHROOT_SH instead of CHROOT_*
drwxr-xr-x - util-vserver