mirror of
https://github.com/MeiK2333/river.git
synced 2025-11-04 14:49:40 +08:00
fix cpp
This commit is contained in:
parent
edef4a410c
commit
09890bd293
@ -134,7 +134,7 @@ pub async fn compile(
|
|||||||
&v,
|
&v,
|
||||||
// 编译的资源限制为固定的
|
// 编译的资源限制为固定的
|
||||||
10000,
|
10000,
|
||||||
64 * 1024,
|
256 * 1024,
|
||||||
)?;
|
)?;
|
||||||
|
|
||||||
let mut runner = process.runner.clone();
|
let mut runner = process.runner.clone();
|
||||||
|
|||||||
@ -215,6 +215,8 @@ impl Runner {
|
|||||||
filter.add_rules(syscall_number, rules).unwrap();
|
filter.add_rules(syscall_number, rules).unwrap();
|
||||||
let (syscall_number, rules) = trace_syscall(libc::SYS_munmap);
|
let (syscall_number, rules) = trace_syscall(libc::SYS_munmap);
|
||||||
filter.add_rules(syscall_number, rules).unwrap();
|
filter.add_rules(syscall_number, rules).unwrap();
|
||||||
|
let (syscall_number, rules) = trace_syscall(libc::SYS_mremap);
|
||||||
|
filter.add_rules(syscall_number, rules).unwrap();
|
||||||
} else {
|
} else {
|
||||||
let (syscall_number, rules) = allow_syscall(libc::SYS_brk);
|
let (syscall_number, rules) = allow_syscall(libc::SYS_brk);
|
||||||
filter.add_rules(syscall_number, rules).unwrap();
|
filter.add_rules(syscall_number, rules).unwrap();
|
||||||
@ -222,6 +224,8 @@ impl Runner {
|
|||||||
filter.add_rules(syscall_number, rules).unwrap();
|
filter.add_rules(syscall_number, rules).unwrap();
|
||||||
let (syscall_number, rules) = allow_syscall(libc::SYS_munmap);
|
let (syscall_number, rules) = allow_syscall(libc::SYS_munmap);
|
||||||
filter.add_rules(syscall_number, rules).unwrap();
|
filter.add_rules(syscall_number, rules).unwrap();
|
||||||
|
let (syscall_number, rules) = allow_syscall(libc::SYS_mremap);
|
||||||
|
filter.add_rules(syscall_number, rules).unwrap();
|
||||||
}
|
}
|
||||||
SeccompFilter::apply(filter.try_into().unwrap()).unwrap();
|
SeccompFilter::apply(filter.try_into().unwrap()).unwrap();
|
||||||
libc::execve(exec_args.pathname, exec_args.argv, exec_args.envp);
|
libc::execve(exec_args.pathname, exec_args.argv, exec_args.envp);
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user