I want to sandbox multiple web applications hosted on the same server. To test my scenario I configure an Apache web server on a local machine with web apps hosted on that machines. One of the web apps is vulnerable and I want to contain the vulnerable web application within its own shell and do not interfere with the rest of web apps hosted on the same server.
How can i achieve this what are options i.e. mandatory access control policies like apparmor, selinux or chroot. Is this a good practices and what are the current practices.