From 15e8df09356d53639dbe50034b82b1356dda6af8 Mon Sep 17 00:00:00 2001
From: ionite34 <dev@ionite.io>
Date: Mon, 28 Nov 2022 12:45:33 +0800
Subject: Move rlimit_fsize to cfg

---
 config/snekbox.cfg | 1 +
 snekbox/nsjail.py  | 3 ---
 2 files changed, 1 insertion(+), 3 deletions(-)

diff --git a/config/snekbox.cfg b/config/snekbox.cfg
index 5434ff7..b821df3 100644
--- a/config/snekbox.cfg
+++ b/config/snekbox.cfg
@@ -21,6 +21,7 @@ envar: "HOME=home"
 keep_caps: false
 
 rlimit_as: 700
+rlimit_fsize_type: INF
 
 clone_newnet: true
 clone_newuser: true
diff --git a/snekbox/nsjail.py b/snekbox/nsjail.py
index 1b2bb41..0dd49e5 100644
--- a/snekbox/nsjail.py
+++ b/snekbox/nsjail.py
@@ -192,9 +192,6 @@ class NsJail:
 
         with NamedTemporaryFile() as nsj_log, MemFS(self.memfs_instance_size) as fs:
             nsjail_args = (
-                # Set fslimit to unlimited, cannot be set in cfg
-                # due to upstream protobuf parsing issue
-                "--rlimit_fsize=inf",
                 # Mount `home` with Read/Write access
                 "--bindmount",
                 f"{fs.home}:home",
-- 
cgit v1.2.3