Firejail
Firejail is a Linux sandboxing utility designed to isolate running applications from the rest of the system. It achieves this by leveraging kernel security features such as namespaces, seccomp-bpf, and capabilities dropping to reduce the potential impact of software compromise.
Firejail runs a program inside a sandbox that provides separate namespaces for process trees, mount points,
Profiles tailor restrictions for individual applications. Profiles are included with Firejail and may be extended or
Firejail is open-source software released under the GNU General Public License and is available in many Linux