X-Git-Url: http://git.ieval.ro/?p=gruntmaster-daemon.git;a=blobdiff_plain;f=gruntmaster-exec;h=bcde8d721321899e0f65cf317ecf8d3d697f4a7e;hp=319671e2aa8153e5aa88bca254618616ed2bf491;hb=16de3659fc10d654c8b8c9e660393c1f25eb85d0;hpb=a6b04042057cffa40b01bb831c4c1d08604d84f0 diff --git a/gruntmaster-exec b/gruntmaster-exec index 319671e..bcde8d7 100755 --- a/gruntmaster-exec +++ b/gruntmaster-exec @@ -28,6 +28,7 @@ use sigtrap qw/XFSZ/; use Getopt::Long; use POSIX qw//; +use Text::ParseWords qw/shellwords/; use Time::HiRes qw/alarm/; my (@fds, $timeout, $mlimit, $olimit, $nobody); @@ -42,13 +43,29 @@ GetOptions( "nobody!" => \$nobody, ); +my $killuser = $ENV{GRUNTMASTER_KILL_USER}; +my @sudo; +@sudo = (shellwords ($ENV{GRUNTMASTER_SUDO}), '--') if $ENV{GRUNTMASTER_SUDO} && $nobody; +undef $mlimit if @sudo; # sudo wants a lot of address space + my $ret = fork // die 'Cannot fork'; if ($ret) { my $tle; - local $SIG{ALRM} = sub { kill KILL => $ret; $tle = 1}; + local $SIG{ALRM} = sub { + if ($killuser) { + system @sudo, 'pkill', '-KILL', '-u', $killuser; + } else { + kill KILL => $ret + } + $tle = 1 + }; alarm ($timeout || 5); waitpid $ret, 0; alarm 0; + if (@sudo) { + $? = $? >> 8; + $? = $? < 128 ? ($? << 8) : $? - 128; + } my $sig = $? & 127; my $signame = sig_name $sig; exit !say TLE, "\nTime Limit Exceeded" if $tle; @@ -70,12 +87,16 @@ if ($ret) { POSIX::close $oldfd or die $!; } } + my $nproc = $killuser ? 5 : 1; + my $debug = $ENV{TEST_VERBOSE}; %ENV = (ONLINE_JUDGE => 1, PATH => $ENV{PATH}, HOME => $ENV{HOME}); setrlimit RLIMIT_AS, $mlimit, $mlimit or die $! if $mlimit; setrlimit RLIMIT_FSIZE, $olimit, $olimit or die $! if $olimit; - setrlimit RLIMIT_NPROC, 1, 1 or die $! if $nobody; + setrlimit RLIMIT_NPROC, $nproc, $nproc or die $! if $nobody; POSIX::setgid $nobody ? 65534 : USER; POSIX::setuid $nobody ? 65534 : GROUP; + unshift @ARGV, @sudo; + say STDERR "Executing: ", join ' ', map { "'$_'" } @ARGV if $debug; exec @ARGV; }