Issues

• Suggestion: narrow three of sandlock-core's dependency features

  multikernel/sandlock#327 · Filter by author ljedrz opened on Oct 26, 2026
  1

• COW cannot serve O_PATH opens of branch entries

  multikernel/sandlock#325 · Filter by author ghazariann opened on Oct 25, 2026

• execve is denied and the supervisor hangs when threads are parked in notifications

  multikernel/sandlock#320 · Filter by author ghazariann opened on Oct 23, 2026

• control: process-wide switch to disable the control socket and name registry

  multikernel/sandlock#317 · Filter by author congwang-mk opened on Oct 23, 2026

• network: named unix socket with a relative path is always refused

  multikernel/sandlock#314 · Filter by author congwang-mk opened on Oct 23, 2026
  1

• landlock: grants under /proc are silently dropped

  multikernel/sandlock#313 · Filter by author congwang-mk opened on Oct 23, 2026

• network: on-behalf named unix connect reports the supervisor as SO_PEERCRED peer

  multikernel/sandlock#311 · Filter by author congwang-mk opened on Oct 23, 2026

• Explore an optional Dogwood authorization layer

  help wanted
  Feature

  multikernel/sandlock#287 · Filter by author congwang-mk opened on Oct 12, 2026

• access queries in mediated metadata paths use supervisor credentials

  multikernel/sandlock#278 · Filter by author jamesboyzj-design opened on Oct 5, 2026

• Virtualize sysfs to prevent host information exposure

  enhancementhelp wanted
  multikernel/sandlock#261 · Filter by author congwang-mk opened on Sep 23, 2026

• cow: a large copy-up stalls the supervisor for its whole duration

  bug
  multikernel/sandlock#242 · Filter by author congwang-mk opened on Sep 20, 2026

• seccomp: signals interrupt queued notifications, so trapped syscalls return EINTR (pipelines hang)

  bug
  multikernel/sandlock#235 · Filter by author congwang-mk opened on Sep 20, 2026
  1

• Read-only VFS layer: user-defined directory listings and synthetic file contents

  help wanted
  Feature

  multikernel/sandlock#202 · Filter by author congwang-mk opened on Aug 15, 2026
  3

• Feature: write-only / append-only filesystem grants (fs_write_only / fs_append)

  multikernel/sandlock#150 · Filter by author dzerik opened on Jul 17, 2026
  1

• Chroot named-AF_UNIX gate bypass: lexical check + Continue (symlink/TOCTOU) and non-UTF-8 None-collapse (fail-open)

  multikernel/sandlock#143 · Filter by author dzerik opened on Jul 15, 2026

• Separate IPv6 out in --net-allow/--net-deny

  multikernel/sandlock#134 · Filter by author congwang-mk opened on Jul 8, 2026

• RFC: Multi-sandbox transactions for pipelines

  help wanted
  Feature

  multikernel/sandlock#65 · Filter by author congwang-mk opened on May 26, 2026
  8

• Sandbox escape by racing seccomp notifications?

  multikernel/sandlock#27 · Filter by author Changaco opened on Apr 26, 2026
  10

• Support UDP port remapping

  help wanted
  multikernel/sandlock#1 · Filter by author congwang-mk opened on Mar 17, 2026