4 ms·

How are you sandboxing it?

• amasad 10y ago
  Docker but not just throwing in a container and calling it a day we use the user namespaces, seccomp etc. On top of that the machines running the code are completely disconnected (different cloud) from any user data etc.
  • evincarofautumn 10y ago
    I was able to hang the session using unsafeCoerce to cause a segfault, so you might want to specify -XSafe in the GHCi options for good measure. I don’t think there’s a way to unset -XSafe in a session once set; trying :set -XUnsafe rightly generates an error.
• deleted 10y ago
  [deleted]