ioi / isolate

Sandbox for securely executing untrusted programs
Other
1.04k stars 154 forks source link

Update isolate-check-environment for CGroupv2 #144

Closed sadfun closed 4 months ago

sadfun commented 5 months ago

This commits updates isolate-check-environment's cgroup_check().

Now, it parses isolate config file at /usr/local/etc/isolate, determines cgroups root and checks for some cgroups files used in cg.c.

Closes #132 and the only roadblock on the way to merging cg2.

gollux commented 4 months ago

Thanks!

However, I do not think it is a good idea to try parsing the configuration file by a shell script and hard-coding the path to the config file in the script.

I suggest adding an option to isolate to make it print the CG root and exit.

gollux commented 4 months ago

I will fix the rest myself.