Linux sandbox I am trying to build an evaluation system for algorithmic problems. The user will have to solve a problem which receives its input data through standard input and prints a solution to standard out. The goal is to solve the given problem within some predefined memory and time constraints. When a user thinks he solved a problem, he submits it for evaluation. There are two problems when evaluating users source code: Execution of the compiled source code must be done in an isolated way (jailing the application), such that the executable cant harm the host (operating system that is running user process). There are several ways how the process could harm the host: use all available memory or disk space, exceed maximum number of threads or processes on the system (or other kernel structures), run for a very long time (infinite loop), access files it isnt supposed to (maybe a solution file). Measuring the resources that the application used during its execution, such as time...