Sandboxing in Linux with zero lines of code

https://blog.cloudflare.com/sandboxing-in-linux-with-zero-lines-of-code/