Issues

• Run rustfmt on the repo

  multikernel/sandlock#300 · Filter by author aeryz opened on Oct 15, 2026
  1

• build: skip unused C stubs and honor cross-compilation toolchains

  multikernel/sandlock#295 · Filter by author congwang-mk opened on Oct 12, 2026

• policy_fn: support granting unrestricted network access after approval

  multikernel/sandlock#291 · Filter by author congwang-mk opened on Oct 12, 2026

• policy_fn: support network-only event subscriptions

  multikernel/sandlock#290 · Filter by author congwang-mk opened on Oct 12, 2026

• policy_fn: allow asynchronous approval without stalling supervision

  multikernel/sandlock#289 · Filter by author congwang-mk opened on Oct 12, 2026

• Explore an optional Dogwood authorization layer

  help wanted
  Feature

  multikernel/sandlock#287 · Filter by author congwang-mk opened on Oct 12, 2026

• Switch to landlock crate

  enhancementgood first issuehelp wanted
  multikernel/sandlock#286 · Filter by author congwang-mk opened on Oct 12, 2026
  2

• access queries in mediated metadata paths use supervisor credentials

  multikernel/sandlock#278 · Filter by author jamesboyzj-design opened on Oct 5, 2026

• Virtualize sysfs to prevent host information exposure

  enhancementhelp wanted
  multikernel/sandlock#261 · Filter by author congwang-mk opened on Sep 23, 2026

• cow: a large copy-up stalls the supervisor for its whole duration

  bug
  multikernel/sandlock#242 · Filter by author congwang-mk opened on Sep 20, 2026

• seccomp: signals interrupt queued notifications, so trapped syscalls return EINTR (pipelines hang)

  bug
  multikernel/sandlock#235 · Filter by author congwang-mk opened on Sep 20, 2026
  1

• Read-only VFS layer: user-defined directory listings and synthetic file contents

  help wanted
  Feature

  multikernel/sandlock#202 · Filter by author congwang-mk opened on Aug 15, 2026
  3

• Feature: write-only / append-only filesystem grants (fs_write_only / fs_append)

  multikernel/sandlock#150 · Filter by author dzerik opened on Jul 17, 2026
  1

• Chroot named-AF_UNIX gate bypass: lexical check + Continue (symlink/TOCTOU) and non-UTF-8 None-collapse (fail-open)

  multikernel/sandlock#143 · Filter by author dzerik opened on Jul 15, 2026

• Separate IPv6 out in --net-allow/--net-deny

  multikernel/sandlock#134 · Filter by author congwang-mk opened on Jul 8, 2026

• RFC: Multi-sandbox transactions for pipelines

  help wanted
  Feature

  multikernel/sandlock#65 · Filter by author congwang-mk opened on May 26, 2026
  8

• Sandbox escape by racing seccomp notifications?

  multikernel/sandlock#27 · Filter by author Changaco opened on Apr 26, 2026
  10

• Support UDP port remapping

  help wanted
  multikernel/sandlock#1 · Filter by author congwang-mk opened on Mar 17, 2026