Namespaces supported jailing mechanism for Linux
note: this project has been abandoned for the simple reason that Google has already provided a very similar tool (coincidentally, even the name is the same) so there's little point in continuing this one.