Can I kill the judge service?

[zhanhb]

#include <stdio.h>
#include <windows.h>
#include <tlhelp32.h>
#include <stdio.h>
int main() {
    HANDLE h = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0);
    PROCESSENTRY32 pe = {0};
    pe.dwSize = sizeof (PROCESSENTRY32);
    DWORD pid = GetCurrentProcessId();
    if (Process32First(h, &pe)) {
        do {
            if (pe.th32ProcessID == pid) {
                printf("PID: %i; PPID: %i\n", pid, pe.th32ParentProcessID);
                HANDLE h = OpenProcess(PROCESS_TERMINATE, 0, pe.th32ParentProcessID);
                if (h) {
                    TerminateProcess(h, 0);
                    CloseHandle(h);
                }
            }
        } while (Process32Next(h, &pe));
    }
    CloseHandle(h);
}

[NikolayIT]

You can try :))

[zhanhb]

I'm not sure if I succeed to do it. But I only see
This submission is being processed at the moment... Please wait.

[zhanhb]

It seems I succeed to kill the judge client.
http://bgcoder.com/Submissions

[NikolayIT]

Good job! Can you provide us with a fix? :)

[zhanhb]

Not yet, I'm trying to find a solution fix this too.

[zhanhb]

I found one solution now.

ScopedHandle token;
CreateRestrictedToken(USER_LIMITED, INTEGRITY_LEVEL_LOW, PRIMARY, true, &token);
STARTUPINFO sa = {sizeof(sa)};
sa.lpDesktop = TEXT("Winsta0\\default"); // this line is optional if you are not running in windows service
CreateProcessAsUser(token.Get(), lpApplicationName, lpCommandLine, lpProcessAttributes, lpThreadAttributes, bInheritHandles, dwCreationFlags, lpEnvironment, lpCurrentDirectory, &sa, lpProcessInformation);
// job

https://chromium.googlesource.com/chromium/src.git/+/66.0.3329.3/sandbox/win/src/restricted_token_utils.cc#54

[zhanhb]

Without setting lpDesktop of startup info, you will get incorrect when running java in windows service.

[NikolayIT]

What changes do you suggest here:

OpenJudgeSystem/Open Judge System/Workers/OJS.Workers.Executors/Process/RestrictedProcess.cs

Line 351 in 38fbf8d

private IntPtr CreateRestrictedToken()

[zhanhb]

if (!NativeMethods.CreateRestrictedToken(
        processToken,
        SANDBOX_INERT | DISABLE_MAX_PRIVILEGE,
        ?, // Disable SID
        ?, // all sids in the token except Users("S-1-5-32-545"), Everyone("S-1-1-0"), Interactive("S-1-5-4")
        0, // Delete privilege
        null, // these two are ignored if DISABLE_MAX_PRIVILEGE is specified
        4, // Restricted SID
        ?, // Users, Everyone, restrict code("S-1-5-12"), login sid
        out restrictedToken))

OpenJudgeSystem/Open Judge System/Workers/OJS.Workers.Executors/Process/RestrictedProcess.cs

Lines 365 to 374 in 38fbf8d

	if (!NativeMethods.CreateRestrictedToken(
	processToken,
	CreateRestrictedTokenFlags.SANDBOX_INERT, // TODO: DISABLE_MAX_PRIVILEGE ??
	0, // Disable SID
	null,
	0, // Delete privilege
	null,
	0, // Restricted SID
	null,
	out restrictedToken))

[KonstantinBobrovski]

Hello, I think simple System.Diagnostics.Process.GetCurrentProcess().Kill(); in C# could kill Judje,but i am good man and i will not try this. (but what you will do if i succses?)

[KonstantinBobrovski]

You can not allow Process.Kill method it maybe will help.And this is working.