How does codeforces run codes safely?

I mean like:

• Preventing system calls
• Allocating resources and time
• Preventing connections
• Isolating the process from the server

And what is the best way to do this?