[verdverm]

I would put virtual or filesystem abstractions in a different category than sandboxing, which puts restrictions over the virtual or native implementations.

[dabbz]

I mean that's a fair distinction. There's definitely some overlap depending on needs though.