Date:  Fri, 24 Sep 2004 03:52:56 +0900
From:  Shugo Maeda <shugo@...>
Subject:  Re: Security error with ERuby
To:  modruby@... (modruby ML)
Message-Id:  <41531B88.3070002@...>
In-Reply-To:  <20040923200958.0662acef.tipogral@...>
References:  <20040920121633.5f35af04.tipogral@...>	<4150CCB2.6040504@...>	<41509A6D.8030706@...>	<4152CEBF.2080307@...>	<20040923195657.1a8438fc.tipogral@...> <20040923200958.0662acef.tipogral@...>
X-Mail-Count: 01315

Hi,

Nagy Bence wrote:
>>All of my directories under /usr/lib/ruby are owned by root and have
>>755 rights, the files I want to load (cgi.rb, date.rb ...) have 644.
(snip)
> /home/gimb/public_html/test.rhtml:1:in `require': loading from unsafe
> path /usr/lib/ruby/site_ruby/1.8:/usr/lib/ruby/site_rub
> y/1.8/i686-linux:/usr/lib/ruby/site_ruby:/usr/lib/ruby/1.8:/usr/lib/rub
> y/1.8/i686-linux:. (SecurityError)[Thu Sep 23 20:04:41 2004] [error]

It seems that `.'(current directory) is included in your load path.
Is it world writable?

Shugo