Have you seen Leash? https://github.com/strongdm/leash It even has a --darwin ma...

		jaytaylor 70 days ago \| parent \| context \| favorite \| on: Using bubblewrap to add sandboxing to NetBSD Have you seen Leash? https://github.com/strongdm/leash It even has a --darwin macOS-native mode which goes beyond the capabilities and guarantees of sandbox-exec and bubblewrap. Full-disclosure: I am one of the authors.