What would be the fastest way to run unknown scripts and apps in *nix environments?
For example, to forbid writing and reading outside the working directory. Or to restrict access to hardware and most commands.
A virtual machine seems to be the most flexible. Adding a new restricted user is another option.
Are there better ways?