Issues

• readlink returns ENOENT instead of EINVAL for non-symlinks (v0.8.9 regression)

  multikernel/sandlock#279 · Filter by author ka2n opened on Oct 6, 2026

• access queries in mediated metadata paths use supervisor credentials

  multikernel/sandlock#278 · Filter by author jamesboyzj-design opened on Oct 5, 2026

• Virtualize sysfs to prevent host information exposure

  enhancementhelp wanted
  multikernel/sandlock#261 · Filter by author congwang-mk opened on Sep 23, 2026

• cow: a large copy-up stalls the supervisor for its whole duration

  bug
  multikernel/sandlock#242 · Filter by author congwang-mk opened on Sep 20, 2026

• seccomp: signals interrupt queued notifications, so trapped syscalls return EINTR (pipelines hang)

  bug
  multikernel/sandlock#235 · Filter by author congwang-mk opened on Sep 20, 2026
  1

• Read-only VFS layer: user-defined directory listings and synthetic file contents

  help wanted
  Feature

  multikernel/sandlock#202 · Filter by author congwang-mk opened on Aug 15, 2026
  3

• Feature: write-only / append-only filesystem grants (fs_write_only / fs_append)

  multikernel/sandlock#150 · Filter by author dzerik opened on Jul 17, 2026
  1

• Chroot named-AF_UNIX gate bypass: lexical check + Continue (symlink/TOCTOU) and non-UTF-8 None-collapse (fail-open)

  multikernel/sandlock#143 · Filter by author dzerik opened on Jul 15, 2026

• Separate IPv6 out in --net-allow/--net-deny

  multikernel/sandlock#134 · Filter by author congwang-mk opened on Jul 8, 2026

• RFC: Add streaming-stdio process API (popen / Process)

  help wanted
  Feature

  multikernel/sandlock#67 · Filter by author congwang-mk opened on May 26, 2026
  2

• RFC: Credential injection via the proxy

  help wanted
  Feature

  multikernel/sandlock#66 · Filter by author congwang-mk opened on May 26, 2026
  5

• RFC: Multi-sandbox transactions for pipelines

  help wanted
  Feature

  multikernel/sandlock#65 · Filter by author congwang-mk opened on May 26, 2026
  8

• Sandbox escape by racing seccomp notifications?

  multikernel/sandlock#27 · Filter by author Changaco opened on Apr 26, 2026
  10

• Support UDP port remapping

  help wanted
  multikernel/sandlock#1 · Filter by author congwang-mk opened on Mar 17, 2026