use strncat() instead of strcat() to enforce correct length
drwxr-xr-x - util-vserver