@[email protected] yes I could manage doing the same in a bastille jail adding some parameters, they may not be all usefull but it covers well :
allow.extattr allow.chflags allow.mount