firejail is a SUID sandbox program which utilizes namespaces, seccomp-bpf and capabilities | 0.9.72 got released! | Guard against sandbox escapes in i3! https://github.com/netblue30/firejail/discussions/6357