From 83539c13ea3665dcba83e39636aa18fca533961c Mon Sep 17 00:00:00 2001 From: virusdefender <1670873886@qq.com> Date: Thu, 17 Sep 2015 19:56:51 +0800 Subject: [PATCH] add c/c++ sys call filter --- judge/judger/client.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/judge/judger/client.py b/judge/judger/client.py index 02097188..3c19057e 100644 --- a/judge/judger/client.py +++ b/judge/judger/client.py @@ -58,11 +58,11 @@ class JudgeClient(object): """ # todo 系统调用白名单 chroot等参数 command = "lrun" + \ - " --isolate-process true" + \ " --max-cpu-time " + str(self._max_cpu_time / 1000.0) + \ " --max-real-time " + str(self._max_real_time / 1000.0 * 2) + \ " --max-memory " + str(self._max_memory * 1000 * 1000) + \ " --network false" + \ + " --syscalls '!fork,execve,flock,ptrace,sync,fdatasync,fsync,msync,sync_file_range,syncfs,unshare,setns,clone[a&268435456==268435456],query_module,sysinfo,syslog,sysfs'" + \ " --uid " + str(lrun_uid) + \ " --gid " + str(lrun_gid)