base-system@gentoo.org Gentoo Base System sed Always enable --sandbox mode for simpler/secure runtime (disables e/r/w commands)