A ptrace-based sandbox that was used in IOI