This week several Linux vendors asked administrators to type one line, user.max_user_namespaces = 0, to shut the door a public root exploit walks through. The same line switches off rootless containers. On FreeBSD that line describes the system as it ships, and the jails go on working. Like for Like.