Repository navigation
Cross-sandbox escape tests #30
Description
The escape suite tests guest → host. Add sandbox → sandbox: one strict sandbox trying to read, write, signal and connect to another, including through /data, forks and the warm pool.
Done when the tests run in the suite on every backend and fail before the per-sandbox UID change and pass after it.
Activity
chxmxii commentedon Oct 12, 2026
Started in #47: the escape suite has an other sandboxes section under strict — the VMM's UID owns this sandbox's
/data,/datais closed to other UIDs (0750 / 0600 on Firecracker), and a UID from another slot tries to read it. The last check needs a subordinate range with two or more slots and is reported as skipped otherwise. Still to do here: two strict sandboxes running side by side, including through forks and the warm pool.chxmxii commentedon Oct 14, 2026
@KoLDXr00T can u use local llms for this?