[vezzy-fnord]

firejail and mbox (not to be confused with the mail storage format) are two good tools for GNU/Linux that employ namespaces and seccomp-bpf from a sandbox-oriented perspective.

[e12e]

Both have been discussed on hn:

Mbox: https://news.ycombinator.com/item?id=7214419

Firejail: https://news.ycombinator.com/item?id=8187534