firejail

Shell

Context: sudo, unprivileged

firejail /bin/sh