In util-linux, this is handled by the --bounding-set arg. See https://github.com/util-linux/util-linux/blob/master/sys-utils/setpriv.1.adoc