SuSE Compartment is a program to build secure compartments for running untrsted/insecure programs, and has got the usual uid/gid setting and chrooting abilitity, but the nice thing is the easy access to linux per process capabilities.
6faa41b9d39469855df1d035d5907b623f6b45bd05a59c93d59e807c750faf85