I believe that's basically docker which uses linux seccomp, but there are also sandboxes for language specific applications.

ps. browsers basically do that with javascript