diff --git a/libmat2/subprocess.py b/libmat2/subprocess.py
index cf24176ec06bef137fd48fb528f0a05a10b77030..f1142be52f862593d0edaa6cae39bc4dd31e93c6 100644
--- a/libmat2/subprocess.py
+++ b/libmat2/subprocess.py
@@ -49,8 +49,14 @@ def _get_bwrap_args(tempdir: str,
 
     args = ro_bind_args + \
         ['--dev', '/dev',
+         '--proc', '/proc',
          '--chdir', cwd,
-         '--unshare-all',
+         '--unshare-user-try',
+         '--unshare-ipc',
+         '--unshare-pid',
+         '--unshare-net',
+         '--unshare-uts',
+         '--unshare-cgroup-try',
          '--new-session',
          # XXX: enable --die-with-parent once all supported platforms have
          # a bubblewrap recent enough to support it.