From: ts <decoux@...>
Date: 2004-08-26T17:48:08+09:00
Subject: Re: Sandboxing librarys

>>>>> "D" == Dominik Werder <dwerder@gmx.net> writes:

D> Or is already done by using anonymous modules? If yes, how? I couldn't
D> understand this :(

 It's really depend on what you want to do, this is why it's difficult to
 give a general response. A stupid example :

svg% cat b.rb
#!/usr/bin/ruby
file = "#{ENV['HOME']}/c.rb"
begin
   Thread.new do
      $SAFE = 4
      load(file, true)
   end.join
rescue
   p $!
end

load(file)
svg% 

svg% cat c.rb
#!/usr/bin/ruby
system("echo hello")
svg%
 
svg% b.rb
#<SecurityError: Insecure operation - system>
hello
svg% 



Guy Decoux