Extra Project (Sandbox) (new)
This project requires from you to do some research and create a prototype of sandboxing environment. The term "sandbox" refers to isolating an executable into a limited environment, with restricted time, memory, output limits, additional constraints for accessing file system and even more. Your task is to prepare a single application that provides all of the mentioned functionality.
Following are tips for your research, terms that should guide you in right direction:
- chroot "jail"
- SELinux
- seccomp
- nice
- cgroups
- setrlimit, getrlimit
- fork, wait
- Signals
Apply to this project only if you need extra points. The deadline for the project is 18.05.2017. By this date you should send source code for the prototype app (it shouldn't be fully functional, but be compilable and run to some reasonable extent), make an appointment with instructor for presentation. You will have 20 minutes to present your application.
|