-
Notifications
You must be signed in to change notification settings - Fork 0
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
- Status: Open.#295 In Lupus/izba;
Desktop app: a second launch can leave a windowless izba-app.exe resident (no single-instance guard)
Status: Open.#293 In Lupus/izba;- Status: Open.#290 In Lupus/izba;
Allowing a host does not authorize its _service._proto.<host> SRV lookups — apt mirror discovery is denied under the enforcing firewall
effort:MMedium: multiple files or components; some design thoughtMedium: multiple files or components; some design thoughtpriority:P2Medium: planned work; not blocking anything criticalMedium: planned work; not blocking anything criticaltype:bugIncorrect behaviour deviating from a documented or expected contractIncorrect behaviour deviating from a documented or expected contractStatus: Open.#288 In Lupus/izba;Netlog DNS-denial rows render an illegible tier ("13") and offer an Allow action that writes a port-53 junk grant
effort:MMedium: multiple files or components; some design thoughtMedium: multiple files or components; some design thoughtpriority:P2Medium: planned work; not blocking anything criticalMedium: planned work; not blocking anything criticaltype:bugIncorrect behaviour deviating from a documented or expected contractIncorrect behaviour deviating from a documented or expected contractStatus: Open.#287 In Lupus/izba;xdg-open inside the sandbox opens the URL in the host's default browser
effort:LLarge: cross-cutting; multiple subsystems or substantial designLarge: cross-cutting; multiple subsystems or substantial designpriority:P2Medium: planned work; not blocking anything criticalMedium: planned work; not blocking anything criticaltype:featureNew capability or user-visible behaviour not yet presentNew capability or user-visible behaviour not yet presentStatus: Open.#285 In Lupus/izba;GUI create dialog has no docker-mode control (--docker / --no-docker parity)
effort:SSmall: focused change in one file or componentSmall: focused change in one file or componentpriority:P2Medium: planned work; not blocking anything criticalMedium: planned work; not blocking anything criticaltype:featureNew capability or user-visible behaviour not yet presentNew capability or user-visible behaviour not yet presentStatus: Open.#284 In Lupus/izba;Record in F-09 that izbad.sock is Medium-only by construction and proven unreachable from a Low-IL VMM (#248), and guard it
effort:XSTrivial: config tweak, one-liner, or doc editTrivial: config tweak, one-liner, or doc editpriority:P3Low: nice-to-have; easily deferred without consequenceLow: nice-to-have; easily deferred without consequencetype:securityVulnerability, auth gap, data-exposure risk, or compliance hardeningVulnerability, auth gap, data-exposure risk, or compliance hardeningStatus: Open.Windows default tier: a Low-IL VMM escapee reaches every sibling sandbox's run dir, disks and workspace — record it, scope #276 honestly, name lockdown as the separation
effort:SSmall: focused change in one file or componentSmall: focused change in one file or componentpriority:P2Medium: planned work; not blocking anything criticalMedium: planned work; not blocking anything criticaltype:securityVulnerability, auth gap, data-exposure risk, or compliance hardeningVulnerability, auth gap, data-exposure risk, or compliance hardeningStatus: Open.Parity guard for the headless bridge dispatch() vs generate_handler![]
effort:SSmall: focused change in one file or componentSmall: focused change in one file or componentpriority:P3Low: nice-to-have; easily deferred without consequenceLow: nice-to-have; easily deferred without consequencetype:dxContributor-facing improvement: CI, tooling, contributing docsContributor-facing improvement: CI, tooling, contributing docsStatus: Open.#279 In Lupus/izba;Windows: gate vsock.sock_1027/1028 to the sandbox's own VMM — the run-dir Low label (which connect() needs) admits every same-user Low-IL process
effort:MMedium: multiple files or components; some design thoughtMedium: multiple files or components; some design thoughtpriority:P2Medium: planned work; not blocking anything criticalMedium: planned work; not blocking anything criticaltype:securityVulnerability, auth gap, data-exposure risk, or compliance hardeningVulnerability, auth gap, data-exposure risk, or compliance hardeningStatus: Open.Dogfood harness: direction-decisive journeys cannot currently measure comprehension
effort:MMedium: multiple files or components; some design thoughtMedium: multiple files or components; some design thoughtpriority:P2Medium: planned work; not blocking anything criticalMedium: planned work; not blocking anything criticaltype:tech-debtInternal restructuring; no user-visible behaviour changeInternal restructuring; no user-visible behaviour changeStatus: Open.#270 In Lupus/izba;