This is already mostly achievable on Linux with ptrace It's not a popular thing, but there are ptrace-based sandbox implementations. I've written one myself 2

This is already mostly achievable on Linux with ptrace It's not a popular thing, but there are ptrace-based sandbox implementations. I've written one myself 20 years ago for a very limited use case (sandboxing of programs that are supposed to only read/write from stdin/stout and pretty much disallowed from anything else). From a quick search I found this to be promising: https://developers.google.com/code-sandboxing/sandbox2/explained https://developers.google.com/code-sandboxing/sandbox2/expla...