lkelly93 / scheduler

Schedules and runs foreign code sequentially.
MIT License
0 stars 1 forks source link

Limit Program's accesses to system resources and network connectivity #2

Open lkelly93 opened 4 years ago

lkelly93 commented 4 years ago

When a program is run it should have 0 access to any network resources and should not be able to see the root file system. It should also not be allowed to use any system calls including but not limited to fork() and exec().

lkelly93 commented 4 years ago

I am working on this now.

lkelly93 commented 4 years ago

I have a working solution right now but I can't implement/test it in our environment until we get the scheduler finished.

lkelly93 commented 3 years ago

Also make sure that we limit imports. Or maybe just block them in general?