All issues

Search results

cow: a large copy-up stalls the supervisor for its whole duration

Status: Open.

#242 In multikernel/sandlock;

· congwang-mk opened on Sep 20, 2026

seccomp: clone3 bypasses the namespace creation ban

Status: Open.

#240 In multikernel/sandlock;

· congwang-mk opened on Sep 20, 2026

netlink: non-dump RTM_GETLINK/RTM_GETADDR is unsupported (ip link show lo fails)

Status: Open.

#239 In multikernel/sandlock;

· congwang-mk opened on Sep 20, 2026

sandbox: descendants outlive a SIGKILLed supervisor

Status: Open.

#238 In multikernel/sandlock;

· congwang-mk opened on Sep 20, 2026

procfs: most of /proc/net still shows the host's network state

Status: Open.

#237 In multikernel/sandlock;

· congwang-mk opened on Sep 20, 2026

procfs: /proc/self/root and symlinks bypass every path-based open filter

Status: Open.

#236 In multikernel/sandlock;

· congwang-mk opened on Sep 20, 2026

seccomp: signals interrupt queued notifications, so trapped syscalls return EINTR (pipelines hang)

Status: Open.

#235 In multikernel/sandlock;

· congwang-mk opened on Sep 20, 2026

run: write grants under /proc/self only cover the first process

help wantedExtra attention is neededExtra attention is needed

Status: Open.

#232 In multikernel/sandlock;

· congwang-mk opened on Sep 19, 2026

run: /proc/self/* grants only cover the top-level process, child processes are denied

Status: Open.

#218 In multikernel/sandlock;

· ghazariann opened on Sep 9, 2026

Read-only VFS layer: user-defined directory listings and synthetic file contents

help wantedExtra attention is neededExtra attention is needed

Status: Open.

Feature

#202 In multikernel/sandlock;

· congwang-mk opened on Aug 15, 2026

An unrecognized BranchAction discriminant silently commits the COW branch

Status: Open.

#175 In multikernel/sandlock;

· dzerik opened on Jul 29, 2026

Python profile parser drops the :ro mount suffix, silently redirecting the mount

Status: Open.

#174 In multikernel/sandlock;

· dzerik opened on Jul 29, 2026