bleeping computer: Sandboxing is a security mechanism employed to separate running processes. By Catalin Cimpanu
'In computer security, sandboxing an application means separating its process from the OS, so vulnerabilities in that app can't be leveraged to extend access to the underlying operating system.
'This is because the sandboxed application works with its own separate portion of disk and memory that isn't linked with the OS.'
tor-browser/sandboxed-tor-browser (compile from source) available here