diff --git a/pages/linux/bwrap.md b/pages/linux/bwrap.md
new file mode 100644
index 00000000000000..e049665c0f4ecb
--- /dev/null
+++ b/pages/linux/bwrap.md
@@ -0,0 +1,8 @@
+# bwrap
+
+> Run programs in a lightweight sandbox.
+> More information: <https://manned.org/bwrap>.
+
+- Run a program in a read-only environment:
+
+`bwrap --ro-bind / / {{/bin/bash}}`