search

ioi / isolate

Sandbox for securely executing untrusted programs
Other
1.05k stars 157 forks source link

Disable System Calls #88

Closed pratikdaigavane closed 4 years ago

pratikdaigavane commented 4 years ago

I have made an online IDE using isolate https://moc.interviewmocha.com/ Is there any way that I can completely disable system calls for all languages?

For example in Python: os.system() or subprocess.call()

in CPP system()

gollux commented 4 years ago

No, Isolate is not a tool for filtering system calls. Why do you want to do that? The program running inside Isolate can reach only what you made available in the sandbox, so there is little use in restricting syscalls.

pratikdaigavane commented 4 years ago

Thanks!