From: "ara.t.howard" <ara.t.howard@...>
Date: 2007-11-22T09:09:37+09:00
Subject: Re: Forcing file operations under a directory


On Nov 21, 2007, at 4:15 PM, Michael Schuerig wrote:

>
> I'm looking for a way to force file operations under a given root
> directory. Somewhat similar to chroot, but purely in Ruby.
>
> For the surface syntax I have in mind something like this
>
>   File.with_root '/var/tmp/safe_place' do
>     File.open('../../etc/passwd', 'w') do |f|
>       f.puts 'Let's try it...' # No! -> Exception
>     end
>   end
>
> I have, unfortunately, no clear idea how to implement File#with_root.
> I'm not even sure it's possible, or possible without an inordinate
> amount of work.
>
> My concrete problem is rather more mundane and can probably be solved
> easier. I have uploaded file data and paths where they ought to be
> stored. I'd like to make sure that they don't escape from underneath
> the top-level directory where they are supposed to stay.
>
> Michael
>
> -- 
> Michael Schuerig
> mailto:michael@schuerig.de
> http://www.schuerig.de/michael/
>



Dir.chdir '/var/tmp/safe_place' do

   ....

end


a @ http://codeforpeople.com/
--
share your knowledge.  it's a way to achieve immortality.
h.h. the 14th dalai lama