update java runtime security policy

This commit is contained in:
virusdefender
2015-09-18 12:52:00 +08:00
parent 482a537ce0
commit 33ba871af0
4 changed files with 6 additions and 1 deletions

View File

@@ -64,6 +64,7 @@ class JudgeClient(object):
" --network false" + \
" --syscalls '!execve:k,flock:k,ptrace:k,sync:k,fdatasync:k,fsync:k,msync,sync_file_range:k,syncfs:k" \
",unshare:k,setns:k,clone[a&268435456==268435456]:k,query_module:k,sysinfo:k,syslog:k,sysfs:k'" + \
" --max-nprocess 20" + \
" --uid " + str(lrun_uid) + \
" --gid " + str(lrun_gid)