security-issues: sanitize parameters

The parameters passed to the handlers from services.py are not sanitazed
at all. Path thraversal and denial of service are possible. This has to
be further tested and evaluated.

Signed-off-by: Lucian Cojocar <cojocar@gmail.com>
one_executor: add Open Nebula executor

Signed-off-by: Lucian Cojocar <cojocar@gmail.com>
vmchecker-queue-manager: add root queue path

When the queue and the course account were located on the same machine,
it was impossible to setup the queue in another directory than the
root of the course.

Signed-off-by: Lucian Cojocar <cojocar@gmail.com>
www-data: permit new connection

Signed-off-by: Lucian Cojocar <cojocar@gmail.com>
one_executor: wait for command to finish

Signed-off-by: Lucian Cojocar <cojocar@gmail.com>
submit: do not hide errors!

Signed-off-by: Lucian Cojocar <cojocar@gmail.com>
one_executor: solve hostname

Signed-off-by: Lucian Cojocar <cojocar@gmail.com>
one_executor: wait for proper state when issuing revert cmd

Signed-off-by: Lucian Cojocar <cojocar@gmail.com>
websutil: bugfix: prevent XSS in the *.vmr files

Signed-off-by: Lucian Cojocar <cojocar@gmail.com>
Reported-by: Victor van der Veen <vvdveen@gmail.com>
vmchecker: display vmchecker-stderr as the last entry

Signed-off-by: Lucian Cojocar <cojocar@gmail.com>
one_executor: increase timeout for machine ready

It turns out that the machine could stay more than 10 seconds in the
unknown state (3, 16). This might be due to the way OpenNebula checks
the state of the machine. 300 seconds are enough -- tested for more than
10 submissions.

Signed-off-by: Lucian Cojocar <cojocar@gmail.com>
websutil: import process for fortune

Signed-off-by: Lucian Cojocar <cojocar@gmail.com>
vmchecker: IgnoredVmrs feature

Configure which *.vmr files are displayed.

Signed-off-by: Lucian Cojocar <cojocar@gmail.com>
vmchecker: DeadlineIsHard option

Specify this to true if we should disable the upload after the deadline.
Signed-off-by: Lucian Cojocar <cojocar@gmail.com>
bugfix: special crafted archive can override tests

A special crafted submission containing an archive named tests.zip can
override the tests archive.

Reported-by: Alyssa Milburn <amilburn@zall.org>
Signed-off-by: Lucian Cojocar <cojocar@gmail.com>
gwt: Statement->Description

Signed-off-by: Lucian Cojocar <cojocar@gmail.com>