Merge pull request #47 from ThreshMain/patch01

Prevent users from spying on each other
2021-01-23 15:23:21 -06:00 · 2021-01-23 15:23:21 -06:00 · db7f5d261e
parent 09eac6ddbc f9dddb42d6
commit db7f5d261e
1 changed files with 6 additions and 1 deletions
--- a/lxc/execute
+++ b/lxc/execute
@ -37,7 +37,12 @@ else
    echo $newinc > $dir/i
 fi
 exec 200>&-
-
+# Prevent users from spying on each other
+lxc-attach --clear-env -n piston -- \
+	/bin/bash -l -c "\
+		chown runner$newinc: -R /tmp/$epoch ;\
+		chmod 700 /tmp/$epoch ;\
+		" > /dev/null 2>&1
 # runner
 timeout -s KILL 20 \
    lxc-attach --clear-env -n piston -- \