[#964] Bastion or SecurityManager for Ruby? — Clemens Hintze <clemens.hintze@...>

Hi,

15 messages 1999/12/10

[#989] a question about to_i — Friedrich Dominicus <Friedrich.Dominicus@...>

Sorry, I'm quite new to ruby. But I encounterd the following problem. If

17 messages 1999/12/19

[ruby-talk:00984] -T2 and require

From: ts <decoux@...>
Date: 1999-12-16 15:32:41 UTC
List: ruby-talk #984

 Apparently the last component of rb_load_path is not checked (or the check
is ignored) in mode -T2.  In the following example, I must use RUBYLIB to
force a check on "."

 "." is in rb_load_path with -T

 It's normal ?

pigeon% ls -alg
total 7
drwxr-xrwx   2 ts       ts           1024 Dec 16 15:58 ./
drwxr-sr-x  42 ts       ts           4096 Dec 16 15:57 ../
-rwxr-xr-x   1 ts       ts             32 Dec 16 15:58 b.rb*
-rw-r--r--   1 ts       ts             17 Dec 16 15:58 c.rb
pigeon% cat b.rb
#!/usr/bin/ruby -T2
require 'c'
pigeon% cat c.rb
p "loading c.rb"
pigeon% echo $RUBYLIB

pigeon% b.rb
"loading c.rb"
pigeon% export RUBYLIB=.
pigeon% b.rb
./b.rb:2:in `require': loading from unsefe path .:/usr/local/lib/site_ruby/1.4/i386-linux:/usr/local/lib/site_ruby/1.4:/usr/lib/ruby/1.4/i386-linux:/usr/lib/ruby/1.4:. (SecurityError)
        from ./b.rb:2
pigeon% 
pigeon% ruby -v
ruby 1.4.3 (1999-12-08) [i386-linux]
pigeon% 


Guy Decoux

In This Thread

Prev Next