Approaches to secure /var/run/user/{UID} in jails

Pretty please, how do you secure /var/run/user/{UID} suing FreeBSD's jail? The folder has wayland-N display sockets that are needed for GUI apps (only select ones), a pulse socket, but everything else should not be exposed to jails.

I don't mean thick jails, I specifically have thin jails that are ephemeral in mind. So basically running off of host's resources with restrictions.
 
Back
Top