Tudor Brindus

Support `subprocess.DEVNULL` in cptbox

2

It wasn't present in Python 2, hence why we have `NullStdoutMixin`. Nowadays, we could do it directly in `tracer.py`, and drop `NullStdoutMixin`.

dmoj-autoconf should print runtime versions

1

...the same way we do during self-testing after #545.

https://github.com/DMOJ/judge-server/blob/efc9f427e003f97c258a8aa82b6ce2d6de643ca5/dmoj/problem.py#L275 This would allow site-managed generators to be written in more than C++. We already store known extensions in the `Executor` classes.

executors: disallow access to /proc

1

/proc/self is difficult/impossible to properly support under Landlock, but runtimes should not be relying on its presence anyway, as it is not POSIX.

* [x] Since we're including a `tests` dir already, and the testsuite runner has been part of this repository since the beginning, we sho[uld make the testsuite a submodule too...

Linux 5.13 introduced a new security subsystem, [Landlock](https://www.kernel.org/doc/html/latest/userspace-api/landlock.html), that we can make use of in cptbox for filesystem sandboxing. Currently, cptbox in the standard configuration makes use of seccomp to...

Compiled executor caching is broken

4

Regressed in https://github.com/DMOJ/judge-server/pull/673, since now the cache is per-worker-process, and gets destroyed on exit. Will require a rewrite of the caching system.

Use memfd for file data

1

We can create a memfd pointing to decompressed problem data, and pass that off to the submissions. Pros: * no more piping necessary in judge; fewer context switches as a...