From: Michael Schuerig <michael@...>
Date: 2007-11-22T08:15:34+09:00
Subject: Forcing file operations under a directory


I'm looking for a way to force file operations under a given root 
directory. Somewhat similar to chroot, but purely in Ruby.

For the surface syntax I have in mind something like this

  File.with_root '/var/tmp/safe_place' do
    File.open('../../etc/passwd', 'w') do |f|
      f.puts 'Let's try it...' # No! -> Exception
    end
  end

I have, unfortunately, no clear idea how to implement File#with_root. 
I'm not even sure it's possible, or possible without an inordinate 
amount of work.

My concrete problem is rather more mundane and can probably be solved 
easier. I have uploaded file data and paths where they ought to be 
stored. I'd like to make sure that they don't escape from underneath 
the top-level directory where they are supposed to stay.

Michael

-- 
Michael Schuerig
mailto:michael@schuerig.de
http://www.schuerig.de/michael/