The sandbox command works well on systems using SELinux.
https://docs.redhat.com/en/documentation/red_hat_enterprise_...