Comment 6 for bug 1438942

I think what should happen is that instead of using realpath(3), schroot needs to use readlink(2) and then append the result of that to the base chroot path and then attempt to call readlink(2) on that path. That would result in symlinks only being resolved inside of the chroot instead of having a symlink that can point to outside of the chroot.