From: Dave Thomas <Dave@...>
Date: 2000-11-14T02:14:57+09:00
Subject: [ruby-talk:6317] Re: Q: Sandbox security, SAFE and system

Robert Feldt <feldt@ce.chalmers.se> writes:

> I'm trying to understand SAFe and tainting in Ruby but I can't see how it
> can help me create a "sandbox" for constrained execution of scripts and
> apps not in my direct control. I would like to limit the files a script
> (and any processes it might spawn/fork etc.) can access and write to a
> specified sub-directory, but I guess it's out of reach for Ruby's tainting
> and SAFE model?

If you're on a Unix box, could you use Dir.chroot?


Dave