Context: I want to write a site for programming competitions for our school, and I know that I need to prevent the abuse of the IO file from the programs presented. However, what I want to know how to do is to prevent someone from writing a program that can run other programs. For example, someone might send a Java program that uses the Runtime or ProcessBuilder classes to do some malicious things on our server, break the site, or chat with another competitor.
What methods of protection against this can be used for unix / linux servers and (for future links only)?
source
share