X-Git-Url: http://git.ieval.ro/?p=gruntmaster-daemon.git;a=blobdiff_plain;f=gruntmaster-exec;h=bcde8d721321899e0f65cf317ecf8d3d697f4a7e;hp=e7d7363d4c44308c0622a32e4ecbb7565682c88c;hb=16de3659fc10d654c8b8c9e660393c1f25eb85d0;hpb=4e08f696f0c0f2419809e5d4b66882fce57bb2f2 diff --git a/gruntmaster-exec b/gruntmaster-exec index e7d7363..bcde8d7 100755 --- a/gruntmaster-exec +++ b/gruntmaster-exec @@ -22,12 +22,13 @@ use constant +{ use constant USER => 65534; use constant GROUP => 65534; -use BSD::Resource qw/setrlimit RLIMIT_AS RLIMIT_FSIZE/; +use BSD::Resource qw/setrlimit RLIMIT_AS RLIMIT_FSIZE RLIMIT_NPROC/; use IPC::Signal qw/sig_name sig_num/; use sigtrap qw/XFSZ/; use Getopt::Long; use POSIX qw//; +use Text::ParseWords qw/shellwords/; use Time::HiRes qw/alarm/; my (@fds, $timeout, $mlimit, $olimit, $nobody); @@ -42,13 +43,29 @@ GetOptions( "nobody!" => \$nobody, ); +my $killuser = $ENV{GRUNTMASTER_KILL_USER}; +my @sudo; +@sudo = (shellwords ($ENV{GRUNTMASTER_SUDO}), '--') if $ENV{GRUNTMASTER_SUDO} && $nobody; +undef $mlimit if @sudo; # sudo wants a lot of address space + my $ret = fork // die 'Cannot fork'; if ($ret) { my $tle; - local $SIG{ALRM} = sub { kill KILL => $ret; $tle = 1}; + local $SIG{ALRM} = sub { + if ($killuser) { + system @sudo, 'pkill', '-KILL', '-u', $killuser; + } else { + kill KILL => $ret + } + $tle = 1 + }; alarm ($timeout || 5); waitpid $ret, 0; alarm 0; + if (@sudo) { + $? = $? >> 8; + $? = $? < 128 ? ($? << 8) : $? - 128; + } my $sig = $? & 127; my $signame = sig_name $sig; exit !say TLE, "\nTime Limit Exceeded" if $tle; @@ -70,11 +87,16 @@ if ($ret) { POSIX::close $oldfd or die $!; } } + my $nproc = $killuser ? 5 : 1; + my $debug = $ENV{TEST_VERBOSE}; %ENV = (ONLINE_JUDGE => 1, PATH => $ENV{PATH}, HOME => $ENV{HOME}); setrlimit RLIMIT_AS, $mlimit, $mlimit or die $! if $mlimit; setrlimit RLIMIT_FSIZE, $olimit, $olimit or die $! if $olimit; + setrlimit RLIMIT_NPROC, $nproc, $nproc or die $! if $nobody; POSIX::setgid $nobody ? 65534 : USER; POSIX::setuid $nobody ? 65534 : GROUP; + unshift @ARGV, @sudo; + say STDERR "Executing: ", join ' ', map { "'$_'" } @ARGV if $debug; exec @ARGV; }