Jails are not such a bad idea, but implementing them correctly is very hard. It might be a good idea to work toward that goal by slowly improving kernel access checking and making it finer grained, but I doubt that it can be done correctly with "porting" or in "just one diff". //art