X-Git-Url: http://git.ieval.ro/?p=gruntmaster-daemon.git;a=blobdiff_plain;f=gruntmaster-exec;h=e7d7363d4c44308c0622a32e4ecbb7565682c88c;hp=dec8be38835c02ed0913078584cce3c1aee16b03;hb=4e08f696f0c0f2419809e5d4b66882fce57bb2f2;hpb=b8f7001a80665c35f33aed657ead2a426d4efac8 diff --git a/gruntmaster-exec b/gruntmaster-exec index dec8be3..e7d7363 100755 --- a/gruntmaster-exec +++ b/gruntmaster-exec @@ -18,6 +18,9 @@ use constant +{ DIED => 5, REJ => 10, }; +# These constants are changed by ex/makevm +use constant USER => 65534; +use constant GROUP => 65534; use BSD::Resource qw/setrlimit RLIMIT_AS RLIMIT_FSIZE/; use IPC::Signal qw/sig_name sig_num/; @@ -27,7 +30,7 @@ use Getopt::Long; use POSIX qw//; use Time::HiRes qw/alarm/; -my (@fds, $timeout, $mlimit, $olimit); +my (@fds, $timeout, $mlimit, $olimit, $nobody); my $close = 1; GetOptions( @@ -36,6 +39,7 @@ GetOptions( "mlimit=i" => \$mlimit, "olimit=i" => \$olimit, "close!" => \$close, + "nobody!" => \$nobody, ); my $ret = fork // die 'Cannot fork'; @@ -69,8 +73,8 @@ if ($ret) { %ENV = (ONLINE_JUDGE => 1, PATH => $ENV{PATH}, HOME => $ENV{HOME}); setrlimit RLIMIT_AS, $mlimit, $mlimit or die $! if $mlimit; setrlimit RLIMIT_FSIZE, $olimit, $olimit or die $! if $olimit; - POSIX::setgid 65534; # Set group id to nogroup - POSIX::setuid 65534; # Set user id to nobody + POSIX::setgid $nobody ? 65534 : USER; + POSIX::setuid $nobody ? 65534 : GROUP; exec @ARGV; }