[LtWorf]

Or one could just use firejail, which comes with a number of pre made profiles for common applications.

[nosioptar]

The sandbox command works well on systems using SELinux.

https://docs.redhat.com/en/documentation/red_hat_enterprise_...