make template nsjail.cfg more compatible by default (#321)

google · Jul 8, 2021 · 27d3e8d · 27d3e8d
1 parent bf889ea
commit 27d3e8d
Showing 1 changed file with 12 additions and 1 deletion.
diff --git a/dist/challenge-templates/pwn/challenge/nsjail.cfg b/dist/challenge-templates/pwn/challenge/nsjail.cfg
@@ -20,18 +20,29 @@ description: "Default nsjail configuration for pwnable-style CTF task."
 mode: ONCE
 uidmap {inside_id: "1000"}
 gidmap {inside_id: "1000"}
-mount_proc: true
 rlimit_as_type: HARD
 rlimit_cpu_type: HARD
 rlimit_nofile_type: HARD
 rlimit_nproc_type: HARD
 
+cwd: "/home/user"
+
 mount: [
   {
     src: "/chroot"
     dst: "/"
     is_bind: true
   },
+  {
+    dst: "/tmp"
+    fstype: "tmpfs"
+    rw: true
+  },
+  {
+    dst: "/proc"
+    fstype: "proc"
+    rw: true
+  },
   {
     src: "/etc/resolv.conf"
     dst: "/etc/resolv.conf"