Skip to content

[Documentation:Autograding] small edits to seccomp page #681

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jun 8, 2025
Merged

[Documentation:Autograding] small edits to seccomp page #681

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 17 additions & 4 deletions _docs/instructor/autograding/system_call_filtering.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -29,12 +29,22 @@ The current categories and lists of calls within each category can be
inspected in the Submitty source code:
[grading/system_call_categories.cpp](https://github.com/Submitty/Submitty/blob/main/grading/system_call_categories.cpp)

When an gradeable autograding configuration is built, we detect the
programs that will be run and attempt to automatically select an
appropriate list of system call categories to allow by default.
Hopefully, for common programming languages and most typical
autograding tasks, this default category list is suitable and the
autograding configuration written by the instructor does not need to
adjust or override these settings. But in cases where these defaults
are not sufficient, the instructor can override these default
settings.


### What system calls are used by a specific program?

The GNU/Linux [strace](https://strace.io/) utility can be used to
collect all system calls made in a run of a program. First, install
strace on your machine.
strace on your machine:

```
sudo apt-get install strace
Expand Down Expand Up @@ -109,15 +119,14 @@ You can just copy paste that into your `config.json` either at the
global level, or per test case.

Alternately, you can simply enable all system calls that are in
*restricted* category:
a *restricted* Submitty system call category:

```
"allow_system_calls" : [ "ALLOW_ALL_RESTRICTED_SYSTEM_CALLS" ],
```

Again, this can be set at the global level or per-test case.


An example autograding configuration using the `"allow_system_calls"`
syntax is here:

Expand Down Expand Up @@ -149,4 +158,8 @@ Students who see this message should first review the programming
assignment instructions and confirm they have followed detailed
instructions about resources and techniques that are allowed. Only
the instructor for the course can modify the list of system calls that
are allowed for autograding that assignment.
are allowed for autograding that assignment.


See also:
[Autograding Configuration Structure](/instructor/autograding/structure)
Loading