A filesystem sandbox for Linux using syscall intercepts. - View it on GitHub