From f9dddb42d64979769545f512014371ed0ea7fd81 Mon Sep 17 00:00:00 2001 From: ThreshMain Date: Sun, 17 Jan 2021 22:48:57 +0100 Subject: [PATCH] Prevent users from spying on each other --- lxc/execute | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/lxc/execute b/lxc/execute index 824b578..2f8a9c6 100755 --- a/lxc/execute +++ b/lxc/execute @@ -37,7 +37,12 @@ else echo $newinc > $dir/i fi exec 200>&- - +# Prevent users from spying on each other +lxc-attach --clear-env -n piston -- \ + /bin/bash -l -c "\ + chown runner$newinc: -R /tmp/$epoch ;\ + chmod 700 /tmp/$epoch ;\ + " > /dev/null 2>&1 # runner timeout -s KILL 20 \ lxc-attach --clear-env -n piston -- \