there's a patch under 2.6 kenerl can almost do the same thing like bsdjail
but the grsec do not support 2.6 kernel, can grsec team add the bsdjail
function in to grsec,no mater kernel 2.4 or 2.6
http://mail.wirex.com/pipermail/linux-s ... rset_UTF-8
btw:rsbac have this function,but the rsbac's really complex
http://www.rsbac.org/models.htm#jail
grsec is my best favorate!
I hope grsec would become perfect
thx in advanced!