freebsd stable - Nov 2011 - 9/RC2: start jails (with epair): ifconfig :permission denied

hi,

I created and started a V2 jail by hand and it works. Now it should start
automatically:

From a HowTo:

#
# Jails configuration
#
jail_enable="YES"
jail_v2_enable="YES"
jail_list="web"

jail_web_name="web"
jail_web_hostname="web.domain.foo"
jail_web_devfs_enable="YES"
jail_web_devfs_ruleset="devfsrules_jail"
jail_web_rootdir="/jails/www"
jail_web_vnet_enable="YES"
jail_web_exec_prestart0="ifconfig epair0 create"
jail_web_exec_prestart1="ifconfig bridge0 addm epair0a"
jail_web_exec_prestart2="ifconfig epair0a up"
jail_web_exec_earlypoststart0="ifconfig epair0b vnet web"
jail_web_exec_afterstart0="ifconfig lo0 127.0.0.1"
jail_web_exec_afterstart1="ifconfig epair0b 192.168.1.3 netmask
255.255.255.0 up"
jail_web_exec_afterstart2="route add default 130.83.160.62"
jail_web_exec_afterstart3="/bin/sh /etc/rc"
jail_web_exec_poststop0="ifconfig bridge0 deletem epair0a"
jail_web_exec_poststop1="ifconfig epair0a destroy"

But:

/etc/rc.d/jail start web

Configuring jails:.
Starting jails:epair0a
ifconfig: up: permission denied
route: writing to routing socket: Operation not permitted
/etc/rc: WARNING: $hostname is not set -- see rc.conf(5).
Creating and/or trimming log files.
Starting syslogd.
syslogd: child pid 6510 exited with return code 1
/etc/rc: WARNING: failed to start syslogd
ELF ldconfig path: /lib /usr/lib /usr/lib/compat /usr/local/lib
Clearing /tmp.
Updating motd:.
Starting sshd.
554 5.3.0 host "localhost" unknown: Protocol not supported
Starting cron.

Mon Nov 28 09:24:30 UTC 2011
 web.domain.foo.


so, I'm sure, that I have something missed. The Jail can't use ifconfig.
So maybe, I have to edit: /etc/defaults/devfs.rules ?

cu denny