Open lkelly93 opened 4 years ago
I am working on this now.
I have a working solution right now but I can't implement/test it in our environment until we get the scheduler finished.
Also make sure that we limit imports. Or maybe just block them in general?
When a program is run it should have 0 access to any network resources and should not be able to see the root file system. It should also not be allowed to use any system calls including but not limited to fork() and exec().