firejail.wordpress.com
Firejail is a SUID program for Linux that restricts the running environment of untrusted applications using Linux namespaces and seccomp-bpf. Written in C with almost no dependencies, it runs on Linux computers with a 3.x kernel or newer. It includes security profiles for many Linux programs, and commands can be prefixed with "firejail" to start a sandbox.