dev@wangxianggang.com Xianggang Wang wechat-linux Use sys-apps/bubblewrap to reduce filesystem exposure and limit privacy leakage.