Forum: Ruby setuid script - require failing

Announcement (2017-05-07): www.ruby-forum.com is now read-only since I unfortunately do not have the time to support and maintain the forum any more. Please see rubyonrails.org/community and ruby-lang.org/en/community for other Rails- und Ruby-related community platforms.
gga (Guest)
on 2007-06-17 13:01
(Received via mailing list)
ruby 1.8.5 and 1.9

I have a script that I am trying to run as setuid.  I've created a
simple C wrapper program for it that calls exec and invokes the
script.
This wrapper program is set to another user (not root), chmod 4755.
The directory where the wrapper and script is chowned to root, with
0755.
The script runs fine, with a taint level of 1.

However, any:

 require 'something'

fails with:

in `require': Insecure operation - require (SecurityError)

as if the string was tainted.  Unfortunately, ruby does not seem too
helpful in explaining what the issue is.

---
I also replaced the script with a two line script in Perl, and Perl
allows me to require any of its modules just fine.
---
Any ideas?
This topic is locked and can not be replied to.