In FreeBSD 11 allow.sysvipc=1 is no longer recommended, instead three new permissions has been introduced:
- sysvshm: Controls access to shared memory
- sysvsem: Controls access to SYSV semaphores
- sysvmsg: Controls access to SYSV message queues
Each of these can have three values:
- disable: Disables access to this type of resource (default)
- inherit: Makes the jail inherit the global SYSV namespace (the old behaviour, same as allow.sysvipc=1)
- new: Creates a new seperate SYSV namespace for this jail. This is what you want.