I think the point is that it works kind of like Jail, but with the ease of use of sudo. Sometimes you might have to grant access to additional resources, but un

I think the point is that it works kind of like Jail, but with the ease of use of sudo. Sometimes you might have to grant access to additional resources, but under many circumstances you can execute untrusted executables or work with untrusted data _without_ setting up a jail for each instance. If you want to have a process that runs constantly in its own environment without even knowing that it is being crippled, jail may be the better choice. But for spontaneous spawning of suspicious scripts, this seems like a great tool.