"chroot_local_user=YES" - what are the risks?

Question

Debian

# You may restrict local users to their home directories.  See the FAQ for
# the possible risks in this before using chroot_local_user or
# chroot_list_enable below.
chroot_local_user=YES

What are the risks? What should I specify so that the users described in /etc/passwd do not have any access above their home directory when accessing ftp?

Answer 1

If disabled, the user can rise above his own directory and have access to "foreign" folders and files, depending on the rights to them.