Or one could just use firejail, which comes with a number of pre made profiles for common applications.
The sandbox command works well on systems using SELinux.
https://docs.redhat.com/en/documentation/red_hat_enterprise_...
alt Hacker News
The sandbox command works well on systems using SELinux.
https://docs.redhat.com/en/documentation/red_hat_enterprise_...