Issues

[Reference] Dossier: podbox on the constrained errand host — every limit → mechanism → workaround (measured)

Azathothas/podbox#114 · opened

on Sep 30, 2026

[T-1317] static payloads can have a native rung with no ptrace and no qemu: userland-execve + Syscall User Dispatch + openat2(RESOLVE_IN_ROOT)

Azathothas/podbox#109 · opened

on Sep 30, 2026

1

[T-1317] static payloads have no rung: add an emulate tier on a prefix-preserving qemu-user

Azathothas/podbox#94 · opened

on Sep 30, 2026

4

[CLI] --strict does not refuse the userland grandchild limit, while --strict=all refuses every run

Azathothas/podbox#93 · opened

on Sep 30, 2026

1

[T-1409] a static Go payload is declined and then run into a GOROOT error instead of a named refusal

Azathothas/podbox#91 · opened

on Sep 30, 2026

3

[QOL] node:alpine is unusable without an undocumented --entrypoint; the #! refusal should name the way out

Azathothas/podbox#92 · opened

on Sep 30, 2026

4

[T-1317] a 128 MiB payload-read ceiling refuses node:alpine (149 MB) and any large runtime

Azathothas/podbox#90 · opened

on Sep 30, 2026

2

[T-1317] interposer execve maps the path but not the loader, so every dynamic grandchild fails 127 — promote clause 17 to a gate

Azathothas/podbox#89 · opened

on Sep 30, 2026

2

[T-1317] interposer does not intercept dlopen/dlmopen, so a dynamic payload cannot load guest shared objects

Azathothas/podbox#88 · opened

on Sep 30, 2026

3

[T-1317] every glibc payload is refused: the ABI check resolves imports against libc alone, not the payload's NEEDED set

Azathothas/podbox#87 · opened

on Sep 30, 2026

3

[T-1317] userland: relative paths are not virtualised, so every relative open/stat/exec fails ENOENT

Azathothas/podbox#86 · opened

on Sep 30, 2026

2

Navigation Menu

Repository navigation

Issues

[Reference] Dossier: podbox on the constrained errand host — every limit → mechanism → workaround (measured)

[T-1317] static payloads can have a native rung with no ptrace and no qemu: userland-execve + Syscall User Dispatch + openat2(RESOLVE_IN_ROOT)

[T-1317] static payloads have no rung: add an emulate tier on a prefix-preserving qemu-user

[CLI] --strict does not refuse the userland grandchild limit, while --strict=all refuses every run

[T-1409] a static Go payload is declined and then run into a GOROOT error instead of a named refusal

[QOL] node:alpine is unusable without an undocumented --entrypoint; the #! refusal should name the way out

[T-1317] a 128 MiB payload-read ceiling refuses node:alpine (149 MB) and any large runtime

[T-1317] interposer execve maps the path but not the loader, so every dynamic grandchild fails 127 — promote clause 17 to a gate

[T-1317] interposer does not intercept dlopen/dlmopen, so a dynamic payload cannot load guest shared objects

[T-1317] every glibc payload is refused: the ABI check resolves imports against libc alone, not the payload's NEEDED set

[T-1317] userland: relative paths are not virtualised, so every relative open/stat/exec fails ENOENT