More on mod_ruby and gems

[Ernest Ellingson]

Here is the output from apache's error_log.

[Mon Oct 24 11:25:38 2005] [error] mod_ruby:
/usr/local/lib/ruby/site_ruby/1.8/rubygems/custom_require.rb:21:in
`require__': Insecure operation - require__ (SecurityError)
[Mon Oct 24 11:25:38 2005] [error] mod_ruby: from
/usr/local/lib/ruby/site_ruby/1.8/rubygems/custom_require.rb:21:in `require'
[Mon Oct 24 11:25:38 2005] [error] mod_ruby: from
/var/www/html/testit.rbx:2


Is there a way to overcome the SecurityError.

require__ looks to be an alias for kernel.require.


Is it possible to untaint this object?

Ernie