sudo apt install firejail firejail-profiles firejail --net=none evince ~/Downloads/file.pdf (replace evince with the name of your viewer) ----------------------Suspicious .pdf :Move the file to a dedicated folder first, then use the `--private` option: mkdir -p ~/pdf-to-open cp ~/Downloads/file.pdf ~/pdf-to-open/ firejail --net=none --private=~/pdf-to-open evince ~/pdf-to-open/file.pdf
a bit complicated no ? ------------------------------... a virtual machine could be a better option ...

