a filesystem and shell sandbox program