I use and enjoy firejail. I use it instead of grsecurity's RBAC on my desktop systems for basic sandboxing with minimal fuss on Arch Linux, where at least when

I use and enjoy firejail. I use it instead of grsecurity's RBAC on my desktop systems for basic sandboxing with minimal fuss on Arch Linux, where at least when I was setting things up, AppArmor needs a lot of manual configuration.