Rebuild sandbox binaries when deploying

1 files changed, 7 insertions, 0 deletions

diff --git a/scripts/deploy/codeq_refresh_and_deploy.sh b/scripts/deploy/codeq_refresh_and_deploy.sh
index 57a23b2..f0a0aeb 100755
--- a/scripts/deploy/codeq_refresh_and_deploy.sh
+++ b/scripts/deploy/codeq_refresh_and_deploy.sh
@@ -36,6 +36,13 @@ if git diff --name-status origin/$CODEQ_GIT_BRANCH | cut -c3- | grep -v \\.gitig
         BUILD_WEB_RESOURCES=1
     fi
 
+    # rebuild sandbox binaries if out of date
+    for prog in python/runner/sandbox python/runner/terminator; do
+        if ! make -q "${prog}"; then
+            make -s "${prog}" && setcap cap_setuid,cap_setgid+ep "${prog}"
+        fi
+    done
+
     if grep -q ^web/ $FILES | grep -v ^web/main.js; then
         # node dependencies may have changed, run installation
         cd web && /usr/bin/npm install