From e409e12439e7b3e29273d69b5d76ad5b049e1d81 Mon Sep 17 00:00:00 2001 From: Martin Polanka Date: Thu, 24 Nov 2016 14:56:09 +0100 Subject: [PATCH 1/2] typos --- Worker.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/Worker.md b/Worker.md index 23e24fe..e579eac 100644 --- a/Worker.md +++ b/Worker.md @@ -67,7 +67,7 @@ When processing the job, it may also be necessary to fetch supplementary files such as helper scripts or test inputs and outputs. Supplementary files are addressed using hashes of their content, which allows -for simple caching. Requested files are downloaded into the cache on demand. +simple caching. Requested files are downloaded into the cache on demand. This mechanism is hidden from the job evaluator, which depends on a `file_manager_interface` instance. Because the filesystem cache can be shared between more workers, cleaning functionality is implemented by the Cleaner @@ -77,9 +77,9 @@ program that should be set up to run periodically. Student submissions are executed inside sandboxing environment to prevent damage of host system and also to restrict amount of used resources. Now only the Isolate sandbox support is implemented in worker, but there is a possibility of easy extending list of supported sandboxes. -Isolated is executed in separate Linux process created by `fork` and `exec` system calls. Communication between processes is performed through unnamed pipe with standard input and output descriptors redirection. To prevent Isolate failure there is another safety guard -- whole sandbox is killed when it does not end in `(time + 300) * 1.2` seconds for `time` as original maximum time allowed for the task. However, Isolate should allways end itself in time, so this additional safety should never be used. +Isolate is executed in separate Linux process created by `fork` and `exec` system calls. Communication between processes is performed through unnamed pipe with standard input and output descriptors redirection. To prevent Isolate failure there is another safety guard -- whole sandbox is killed when it does not end in `(time + 300) * 1.2` seconds for `time` as original maximum time allowed for the task. However, Isolate should allways end itself in time, so this additional safety should never be used. -Sandbox in general has to be command line application taking parameters with arguments, standard input or file. Outputs should be written to file or standard output. There no other requirements, worker design is very versatile and can be adapted to different needs. +Sandbox in general has to be command line application taking parameters with arguments, standard input or file. Outputs should be written to file or standard output. There are no other requirements, worker design is very versatile and can be adapted to different needs. ## Installation From abae701dd18d95b928c967a38569fb2248a205ef Mon Sep 17 00:00:00 2001 From: Martin Polanka Date: Thu, 24 Nov 2016 15:06:28 +0100 Subject: [PATCH 2/2] superadmin --- User-documentation.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/User-documentation.md b/User-documentation.md index 495bcaa..95df754 100644 --- a/User-documentation.md +++ b/User-documentation.md @@ -62,7 +62,7 @@ ## Superadministrator -Superadmin is user with the most priviledges. +Superadmin is user with the most priviledges and as such superadmin should be quite unique role. Ideally there should be only one of this kind, used with special caution and adequate security. ### Users management