Dmitry Vyukov 4782c2b8e6 executor: revive setuid sandbox ...

The new namespace-based sanboxing is good,
but it's not always what one wants
(and also requires special kernel configs).

Change dropprivs config value to sandbox,
which can have different values (currently: none, setuid, namespace).
Setuid mode uses setuid(nobody) before fuzzing as before.

In future we can add more sandboxing modes or, say,
extend -sandbox=setuid to -sandbox=setuid:johndoe
to impersonolate into given user.

2016-07-01 22:26:33 +02:00

..

stress.go

executor: revive setuid sandbox

2016-07-01 22:26:33 +02:00