Conclusion

Systrace:
Fine-grained sandboxing with multiple policies.
Interactive-policy generation.
Automatic policy generation.
Automatic policy enforcement.
Dynamic argument rewriting framework.

Integrated into OpenBSD and NetBSD.
Port for GNU/Linux on its way.

More information at:
http://www.citi.umich.edu/u/provos/systrace/