[IshKebab]

You can't. It's only for filesystem and TCP sandboxing.

[gnoack]

Exactly, for resource limits you can use setrlimit(2) or cgroups if needed.