增强判题和 docker 安全性

2015-09-25 15:05:17 +08:00
parent e3d3fa7eb4
commit 4ab1107627
2 changed files with 3 additions and 1 deletions
--- a/judge/judger/client.py
+++ b/judge/judger/client.py
@@ -62,6 +62,8 @@ class JudgeClient(object):
                  " --max-real-time " + str(self._max_real_time / 1000.0 * 2) + \
                  " --max-memory " + str(self._max_memory * 1000 * 1000) + \
                  " --network false" + \
+                  " --remount-dev true " + \
+                  " --reset-env true " + \
                  " --syscalls '" + self._language["syscalls"] + "'" + \
                  " --max-nprocess 20" + \
                  " --uid " + str(lrun_uid) + \