[root@worm ~]# sysctl -a|grep jail
security.jail.jailed: 0
security.jail.chflags_allowed: 1
security.jail.allow_raw_sockets: 1
security.jail.enforce_statfs: 2
security.jail.sysvipc_allowed: 9
security.jail.socket_unixiproute_only: 0
security.jail.set_hostname_allowed: 1