- Mount point cleanup is now deferred when multiple sandboxes are still active, using a reference counter to avoid premature cleanup (search for
"Deferring mount point cleanup"). - Added
--unshare-userflag in certain sandbox configurations for tighter process isolation. - Write paths that get wiped by a
denyReadtmpfs mount are now automatically re-bound (search for"Re-bound write path wiped by denyRead tmpfs"). - Deny path deduplication prevents redundant sandbox mount operations.
Evidence
Sandbox refcount (search for "sandbox(es) still active") and re-bind logic (search for "Re-bound write path wiped by denyRead tmpfs")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.