Landlock-ing Linux
It’s a mechanism similar in intent to OpenBSD’s unveil(2) and pledge(2) to allow processes to opt out of access to things they don’t need, sandboxing themselves automatically without the need for the likes of SELinux.
Here’s the actual project website: landlock.io