On Linux, a simple solution for this particular use case is to run a VNC server inside xvfb. You get total isolation between your real desktop, and your "sandbo

On Linux, a simple solution for this particular use case is to run a VNC server inside xvfb. You get total isolation between your real desktop, and your "sandbox" - no embarrassing notifications! Of course you can't drag windows around from one to the other, but that's what a sandbox does...