hbsd-current-01[shawn]:/home/shawn $ sysctl security.bsd.unprivileged_chroot security.mac.do.rules                                                                        [11:24:09]
security.bsd.unprivileged_chroot: 1
security.mac.do.rules: uid=1001:uid=0
hbsd-current-01[shawn]:/home/shawn $ id                                                                                                                                   [11:24:19]
uid=1001(shawn) gid=1001(shawn) groups=1001(shawn),0(wheel),5(operator)
hbsd-current-01[shawn]:/home/shawn $ chroot -n /                                                                                                                          [11:24:21]
Agent pid 19225
hbsd-current-01[shawn]:/ $ su -                                                                                                                                           [11:24:25]
su: not running setuid
hbsd-current-01[shawn]:/ (1) $ mdo -u root -i /bin/sh                                                                                                                     [11:24:26]
# id
uid=0(root) gid=0(wheel) egid=1001(shawn) groups=1001(shawn),0(wheel),5(operator)
# ^D
hbsd-current-01[shawn]:/ $ id                                                                                                                                             [11:24:32]
uid=1001(shawn) gid=1001(shawn) groups=1001(shawn),0(wheel),5(operator)
hbsd-current-01[shawn]:/ $