Only look for the kernel module if not jailed.

KLD-related system calls have been hardened to disallow jailed users
from seeing any KLD information.
Signed-off-by: Shawn Webb <shawn.webb@hardenedbsd.org>
github-issue:	#34

etc/rc.d/secadm

@@ -46,14 +46,20 @@ command_args="load ${secadm_rules}"
 
 secadm_prestart()
 {
+	local jailed
+
+	jailed=$(sysctl -n security.jail.jailed)
+
 	if [ ! -f ${secadm_rules} ]
 	then
 		echo "missing rules file: ${secadm_rules}"
 		return 1
 	fi
 
-	if ! /sbin/kldstat -qm secadm; then
-		/sbin/kldload secadm
+	if [ ${jailed} -eq 0 ]; then
+		if ! /sbin/kldstat -qm secadm; then
+			/sbin/kldload secadm
+		fi
 	fi
 }