go-sandbox/README.md
2019-03-30 22:03:21 -04:00

721 B

go-judger

Under developing.

Goal is to reimplement uoj-judger/run_program in GO language using libseccomp.

Features (same as uoj-judger):

  1. Restricted computing resource: Time / Memory (Stack) / Output
  2. Restricted syscall access (by libseccomp / ptrace)
  3. Restricted file access (read / write / access / exec)

Planed features:

  1. Enhanced memory allocation check (trace brk)
  2. ...

Default file access action:

  • check file read / write: open, openat
  • check file read: readlink, readlinkat
  • check file write: unlink, unlinkat, chmod, rename
  • check file access: stat, lstat,
  • check file exec: execve