firejail

Sandboxes processes to containers.

General

Just append firejail infront of the application, e.g.,

firejail firefox

would open a restricted Mozilla Firefox.

Listing running sandboxes can be done with firejail --list which will yield PID's as well. Sandboxes can either be shutdown via Ctrl + C or via firejail --shutdown=pid.

Profiles

Over time more and more profiles will be developed for different applications, and firejail will automatically look for a already existing profile and use it if one is found. However if no profile is found, the default.profile will be used.

Profiles can be found at ~/etc/firejail/.