automatic service jails: some setup for full functionality of the services in automatic service jails

[netchild]

Summary

This depends upon:

--https://reviews.freebsd.org/D40369-- committed

https://reviews.freebsd.org/D40370

It gives more permissions to services (e.g. network access to services which require this) which are started as an automatic service jail (D40370). The sshd patch is important for the sshd-related functionality as described in the man-page of D40370.

The location of the added env vars is supposed to allow overriding them in rc.conf, and to hard-disable the use of svcj for some parts where it doesn't make sense or will not work. Only a small subset of all of the services is tested.

[netchild]

Add config for some more services.

[netchild]

Only rc.d/opensm is missing.

[netchild]

• make some scripts compatible with svcj (convert parts of the precmd into another way of settings variables), precmd is not run inside the same shell/jail = make it work with svcj
• add some support for nfs in svcj, not yet finished (precmd is not comaptible)
• exclude some scripts from svcj due to an incompatible precmd (not run in same shell/jail)