Firejail

Firejail is a SUID sandbox program that restricts the run-time environment of untrusted applications using Linux namespaces, seccomp-bpf, and capabilities.

Basic usage

# run an application inside the sandbox
firejail firefox

# restrict a program to a private home directory
firejail --private=~/some_directory <program>

Source