executors: make compiler fs whitelists a superset of their runtimes'

dmoj/executors/RKT.py

@@ -7,10 +7,7 @@
 class Executor(CompiledExecutor):
     ext = 'rkt'
     fs = [RecursiveDir('/etc/racket'), ExactFile('/etc/passwd'), ExactDir('/')]
-    compiler_read_fs = [
-        RecursiveDir('/etc/racket'),
-        RecursiveDir('~/.local/share/racket'),
-    ]
+    compiler_read_fs = [RecursiveDir('~/.local/share/racket')]
 
     command = 'racket'
 

dmoj/executors/compiled_executor.py

@@ -118,8 +118,16 @@ def get_compile_env(self) -> Optional[Dict[str, str]]:
     def get_compile_popen_kwargs(self) -> Dict[str, Any]:
         return {}
 
+    def get_compiler_read_fs(self) -> List[FilesystemAccessRule]:
+        return self.get_fs() + self.compiler_read_fs
+
+    def get_compiler_write_fs(self) -> List[FilesystemAccessRule]:
+        return self.get_write_fs() + self.compiler_write_fs
+
     def get_compiler_security(self):
-        sec = CompilerIsolateTracer(tmpdir=self._dir, read_fs=self.compiler_read_fs, write_fs=self.compiler_write_fs)
+        sec = CompilerIsolateTracer(
+            tmpdir=self._dir, read_fs=self.get_compiler_read_fs(), write_fs=self.get_compiler_write_fs()
+        )
         return self._add_syscalls(sec, self.compiler_syscalls)
 
     def create_compile_process(self, args: List[str]) -> TracedPopen:

dmoj/executors/mono_executor.py

@@ -34,7 +34,6 @@ class MonoExecutor(CompiledExecutor):
     data_grace = 65536
     cptbox_popen_class = MonoTracedPopen
     fs = [RecursiveDir('/etc/mono')]
-    compiler_read_fs = fs
     # Mono sometimes forks during its crashdump procedure, but continues even if
     # the call to fork fails.
     syscalls = [