If only more Linux programs followed sandboxing best practices... - eviltoast