Sandboxing Applications with Bubblewrap: Securing a Basic Shell | sloonz's blog - eviltoast