3 ms·There is SELinux' `sandbox(8)`. It is explicitly designed for that purpose.by ibotty 7y agoThere is SELinux' `sandbox(8)`. It is explicitly designed for that purpose.