Low-level unprivileged sandboxing tool used by Flatpak and similar projects - View it on GitHub