Prevent users from spying on each other

2021-01-17 22:48:57 +01:00 · 2021-01-17 22:48:57 +01:00 · f9dddb42d6
parent 563cf19068
commit f9dddb42d6
1 changed files with 6 additions and 1 deletions
--- a/lxc/execute
+++ b/lxc/execute
@ -37,7 +37,12 @@ else
    echo $newinc > $dir/i
 fi
 exec 200>&-
-
+# Prevent users from spying on each other
+lxc-attach --clear-env -n piston -- \
+	/bin/bash -l -c "\
+		chown runner$newinc: -R /tmp/$epoch ;\
+		chmod 700 /tmp/$epoch ;\
+		" > /dev/null 2>&1
 # runner
 timeout -s KILL 20 \
    lxc-attach --clear-env -n piston -- \