diff options
| author |  ionite34 <[email protected]> | 2022-11-28 12:45:33 +0800 |
|---|---|---|
| committer | ionite34 <[email protected]> | 2022-11-28 12:45:33 +0800 |
| commit | 15e8df09356d53639dbe50034b82b1356dda6af8 (patch) | |
| tree | a85fd7996e167d83f852a1d22639aade509f6897 | |
| parent | Fix input append to args (diff) | |
Move rlimit_fsize to cfg
| -rw-r--r-- | config/snekbox.cfg | 1 | ||||
| -rw-r--r-- | snekbox/nsjail.py | 3 |
2 files changed, 1 insertions, 3 deletions
diff --git a/config/snekbox.cfg b/config/snekbox.cfg index 5434ff7..b821df3 100644 --- a/config/snekbox.cfg +++ b/config/snekbox.cfg @@ -21,6 +21,7 @@ envar: "HOME=home" keep_caps: false rlimit_as: 700 +rlimit_fsize_type: INF clone_newnet: true clone_newuser: true diff --git a/snekbox/nsjail.py b/snekbox/nsjail.py index 1b2bb41..0dd49e5 100644 --- a/snekbox/nsjail.py +++ b/snekbox/nsjail.py @@ -192,9 +192,6 @@ class NsJail: with NamedTemporaryFile() as nsj_log, MemFS(self.memfs_instance_size) as fs: nsjail_args = ( - # Set fslimit to unlimited, cannot be set in cfg - # due to upstream protobuf parsing issue - "--rlimit_fsize=inf", # Mount `home` with Read/Write access "--bindmount", f"{fs.home}:home", |