refs #44, #45: gcc target binary now get correct permissions!

* Fixed via lablup/backend.ai-jail#4.
lablup · Aug 24, 2017 · 6a37658 · 6a37658
1 parent 688a982
commit 6a37658
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 5 deletions.
diff --git a/c/policy.yml b/c/policy.yml
@@ -20,3 +20,4 @@ diff_to_default: true
 # Following syscalls are blindly allowed.
 # IMPORTANT: ptrace MUST NOT be included!
 allowed_syscalls:
+  - "umask"
diff --git a/c/run.py b/c/run.py
@@ -51,7 +51,7 @@ async def build(self, build_cmd):
                     await self.run_subproc(cmd)
                 cfiles = ' '.join(map(lambda p: shlex.quote(str(p)), cfiles))
                 ofiles = ' '.join(map(lambda p: shlex.quote(str(p)), ofiles))
-                cmd = f'gcc {ofiles} {DEFAULT_LDFLAGS} -o ./main && chmod 755 ./main'
+                cmd = f'gcc {ofiles} {DEFAULT_LDFLAGS} -o ./main'
                 await self.run_subproc(cmd)
             else:
                 log.error('cannot find build script ("Makefile") '
@@ -68,9 +68,9 @@ async def execute(self, exec_cmd):
             return
         elif exec_cmd == '*':
             if Path('./main').is_file():
-                await self.run_subproc('chmod 755 ./main; ./main')
+                await self.run_subproc('./main')
             elif Path('./a.out').is_file():
-                await self.run_subproc('chmod 755 ./a.out; ./a.out')
+                await self.run_subproc('./a.out')
             else:
                 log.error('cannot find executable ("a.out" or "main").')
         else:
@@ -83,8 +83,8 @@ async def query(self, code_text):
         with tempfile.NamedTemporaryFile(suffix='.c', dir='.') as tmpf:
             tmpf.write(code_text.encode('utf8'))
             tmpf.flush()
-            cmd = (f'gcc {tmpf.name} {DEFAULT_CFLAGS} -o ./main {DEFAULT_LDFLAGS} '
-                   f'&& chmod 755 ./main && ./main')
+            cmd = (f'gcc {tmpf.name} {DEFAULT_CFLAGS} -o ./main {DEFAULT_LDFLAGS} && '
+                   f'./main')
             await self.run_subproc(cmd)