Mining Sandboxes for Linux Containers