a tiny, custom launcher that handles namespacing, control groups, chroot'ing, and more
forked from https://chromium.googlesource.com/chromiumos/platform/minijail/ documentation http://www.chromium.org/chromium-os/chromiumos-design-docs/system-hardening