simple PAM module that uses unshare(2) to isolate a user. - View it on GitHub