Linux application sandboxing