Firejail is a SUID sandbox program that reduces the risk of security breaches by restricting the running environment of untrusted applications. It allows a process and all its descendants to have their own private view of the globally shared kernel resources, such as the network stack, process table, mount table.