From: JamesBritt <james@...>
Date: 2002-08-19T12:04:03+09:00
Subject: RE: How can I avoid "Insecure operation - stat (SecurityError) "

>
> > How can I retrieve the last mod time of a file without raising security
> > errors?
> > untainintg the string variable holding the name of file doesn't
> help either.
>
> Try putting this in your httpd.conf and then restarting Apache:
>
> RubySafeLevel 0

Thanks, but I'm just a system user, with no access to the apache config.
Plus, it seems like a bad idea to reduce security for all processes when
what I really want to is to explicitly drop my guard for a specific piece of
code.

>
> There might be another way to get your code to work without decreasing
> the safe level (which is probably more secure). You might try asking
> on the modruby mailing list (http://www.modruby.net/#label:10).


I'll see about that.  Thanks


James
>