isolate processes on linux