The sandbox command works well on systems using SELinux.

https://docs.redhat.com/en/documentation/red_hat_enterprise_...