SANDBOXEXEC

Summary from the TLDR InfoSec newsletter

A lightweight command sandbox for Linux, secure-by-default, built on Landlock. Use it to run risky commands with a tighter blast radius: third-party CLIs, untrusted scripts, generated code, and one-off tooling.