firejail is a SUID sandbox program which utilizes namespaces, seccomp-bpf and capabilities | 0.9.76 got released! | Beware gdk-pixbuf2 and glycin mayhem: https://github.com/netblue30/firejail/issues/6906