OLYMPIADS IN INFORMATICS, 2012, Vol. 6, 100-109
© Institute of Mathematics and Informatics,

ISSN 1822-7732

A New Contest Sandbox

Martin MARES, Bernard BLACKHAM

Department of Applied Mathematics, Faculty of Mathematics and Physics Charles University in Prague Malostranské nám. 25, 118 00 Praha 1, Czech Republic School of Computer Science and Engineering, University of New South Wales Sydney NSW 2052, Australia E-mail: mares@kam.mff.cuni.cz, bernardb@cse.unsw.edu.au

Abstract

Programming contests with automatic evaluation of submitted solutions usually employ a sandbox. Its job is to run the solution in a controlled environment, while enforcing security and resource limits. We present a new construction of a sandbox, based on recently added container features of Linux kernel. Unlike previous sandboxes, it has no measurable overhead and is able to handle multi-threaded programs.

Keywords:

automatic grading, sandbox, containers, threads, computer security


PDFTo preview full article text in PDF format click here

Get Free ReaderYou could obtain free Acrobat Reader from Adobe


Copyright © Olympiads in Informatics, Vilnius University Institute of Mathematics and Informatics, 2012