Issues

• Virtualize sysfs to prevent host information exposure

  multikernel/sandlock#261 · opened on Sep 23, 2026

• cow: a large copy-up stalls the supervisor for its whole duration

  multikernel/sandlock#242 · opened on Sep 20, 2026

• seccomp: signals interrupt queued notifications, so trapped syscalls return EINTR (pipelines hang)

  multikernel/sandlock#235 · opened on Sep 20, 2026
  1

• Read-only VFS layer: user-defined directory listings and synthetic file contents

  Feature

  multikernel/sandlock#202 · opened on Aug 15, 2026
  3

• Feature: write-only / append-only filesystem grants (fs_write_only / fs_append)

  multikernel/sandlock#150 · opened on Jul 17, 2026
  1

• Chroot named-AF_UNIX gate bypass: lexical check + Continue (symlink/TOCTOU) and non-UTF-8 None-collapse (fail-open)

  multikernel/sandlock#143 · opened on Jul 15, 2026

• Separate IPv6 out in --net-allow/--net-deny

  multikernel/sandlock#134 · opened on Jul 8, 2026

• RFC: Add streaming-stdio process API (popen / Process)

  Feature

  multikernel/sandlock#67 · opened on May 26, 2026
  2

• RFC: Credential injection via the proxy

  Feature

  multikernel/sandlock#66 · opened on May 26, 2026
  5

• RFC: Multi-sandbox transactions for pipelines

  Feature

  multikernel/sandlock#65 · opened on May 26, 2026
  8

• Sandbox escape by racing seccomp notifications?

  multikernel/sandlock#27 · opened on Apr 26, 2026
  10

• Support UDP port remapping

  multikernel/sandlock#1 · opened on Mar 17, 2026