Sandboxing and sandbox escape with systemd

Today, the most popular Linux service manager is systemd. Services are defined in units located in defined directories. Package units are in /usr/lib/systemd/system and administrators add their units to /etc/systemd/system . In addition to the system service manager , systemd provides a user service manager , for user services. User units are in other directories, including in the user's home…