Apparmor profile for executing untrusted binaries for online judge
I am writing an online judge so I need to sandbox execution of untrusted binaries for judging and for that, I am using apparmor. Here’s my current simple profile:
#include <tunables/global>
profile bin_jail {
deny /** rwkx,
}
The… Continue reading Apparmor profile for executing untrusted binaries for online judge