Description
Filesystem and network isolation helps test or run a command with fewer ways to touch the host system. This command-line sandbox wrapper is useful for developers and security-conscious users checking untrusted or experimental processes. It changes file and network visibility for child processes but is not a substitute for full virtualization or strong policy review.