From d6c17424ccdafd61cacb1746408582a3bd87ba23 Mon Sep 17 00:00:00 2001
From: Diptanu Choudhury <diptanuc@gmail.com>
Date: Wed, 3 Feb 2016 16:14:13 -0800
Subject: [PATCH] Turning on isolation for exec

---
 client/driver/exec.go | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/client/driver/exec.go b/client/driver/exec.go
index bf696f31a..5c23961d8 100644
--- a/client/driver/exec.go
+++ b/client/driver/exec.go
@@ -115,9 +115,12 @@ func (d *ExecDriver) Start(ctx *ExecContext, task *structs.Task) (DriverHandle,
 		return nil, err
 	}
 	executorCtx := &plugins.ExecutorContext{
-		TaskEnv:  d.taskEnv,
-		AllocDir: ctx.AllocDir,
-		Task:     task,
+		TaskEnv:          d.taskEnv,
+		AllocDir:         ctx.AllocDir,
+		Task:             task,
+		ResourceLimits:   true,
+		FSIsolation:      true,
+		UnprivilegedUser: false,
 	}
 	ps, err := executor.LaunchCmd(&plugins.ExecCommand{Cmd: command, Args: driverConfig.Args}, executorCtx)
 	if err != nil {