sandbox-exec. It's not great, but it's usable. https://igorstechnoclub.com/sandbox-exec/ https://igorstechnoclub.com/sandbox-exec/ > It’s not any different It

sandbox-exec. It's not great, but it's usable. https://igorstechnoclub.com/sandbox-exec/ https://igorstechnoclub.com/sandbox-exec/ > It’s not any different It's very different. With docker on Mac you're running a VM which runs a wrapped up complete system that runs your app. With selinux/sandbox-exec you run just your app and can skip the extra packaging needed for docker and mounts. (And get the extra performance)