MAC/do: Fix jail_get() (PR_METHOD_GET)

• Properly fill 'jsys' before copying it out (we would leak bytes from the kernel stack). When the current jail has its own 'struct rules', set it to the special value JAIL_SYS_DISABLE if it in fact holds no rules.
• Don't forget to unlock the jail holding rules on error.
• Correctly return errors.

Reviewed by: bapt
Approved by: markj (mentor)
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D47609

(cherry picked from commit 2a20ce91dc29e5a80f4eeb9352cf3169cd1891b9)