firejail has a setting to protect against it.