From: matz@... (Yukihiro Matsumoto)
Date: 2000-11-14T14:39:29+09:00
Subject: [ruby-talk:6344] Re: Q: Sandbox security, SAFE and system

Hi,

In message "[ruby-talk:6316] Q: Sandbox security, SAFE and system"
    on 00/11/14, Robert Feldt <feldt@ce.chalmers.se> writes:

|I'm trying to understand SAFe and tainting in Ruby but I can't see how it
|can help me create a "sandbox" for constrained execution of scripts and
|apps not in my direct control. I would like to limit the files a script
|(and any processes it might spawn/fork etc.) can access and write to a
|specified sub-directory, but I guess it's out of reach for Ruby's tainting
|and SAFE model?

I'm afraid it is.  You might accomplish it by using fork and chroot
(both is available), but I'm not sure if chroot is working on Windows.
Cygwin might implement it.  I know their paranoid work to emulate
UNIX.

							matz.