<charliesome>
_ko1: thanks :) it's my site actually
<_ko1>
cool!
<charliesome>
it has ruby 1.0 which imo is a killer feature
<_ko1>
how to make sandbox?
<zzak>
_ko1: is there a ticket for that? i still want to add rdoc, i see it's not reverted but commented out
<_ko1>
ah, yes. MRI 1.0 awsome!
<charliesome>
_ko1: i use a modified version of the sandbox from here: http://www.ucw.cz/moe/
<charliesome>
it is ptrace based
<_ko1>
zzak: secret :)
<_ko1>
(no ticket)
<_ko1>
charliesome: so you filter all system calls using ptrace?
<charliesome>
_ko1: user submitted code runs on an isolated vm running an old version of ubuntu with an old kernel (that sandbox doesn't work on newer or 64 bit kernels)
<charliesome>
yes
<charliesome>
i allow interpreters to make any syscall until they open the source file
<charliesome>
then it locks down
<_ko1>
charliesome: i'm confusing. isolating VM seems not need to use ptrace.
<charliesome>
i don't start a new vm for each submission
<charliesome>
so i need to ensure the integrity of the evaluator vm with a ptrace sandbox
<zzak>
_ko1: have any use case or toy for iseq i can reference?
<_ko1>
> while true; fork; end
<_ko1>
> Forbidden syscall clone
<_ko1>
:)
<charliesome>
:)
<charliesome>
the main reason i'm using a separate vm is because the kernel on my main server is too new for the sandbox
<_ko1>
zzak: ISeq#path are only for debugging, i can imagine
<_ko1>
charliesome: ah, i understand. there is two level isolation. (1) VM isolation (one vm for all submission) (2) ptrace (each submission)
<znz_v>
biff: [ruby-changes:26581] keiju:r38632 (trunk): * lib/irb/ruby-lex.rb: make lex_state to EXPR_END when next token - http://mla.n-z.jp/?ruby-changes=26581
carlosantonio has quit [Ping timeout: 256 seconds]
carlosan_ has quit [Remote host closed the connection]
drbrain has joined #ruby-core
drbrain has quit [Ping timeout: 260 seconds]
<indirect>
_ko1: Bundler will work with 2.0.0 when it is released. Right now Bundler 1.3.0.pre.3 works with Rubygems 2.0.0.preview.2.2 and Ruby 2.0.0-preview3
carlosantonio has quit [Remote host closed the connection]
drbrain has joined #ruby-core
drbrain has quit [Read error: Operation timed out]
__BigO__ has joined #ruby-core
carlosan_ has joined #ruby-core
carlosan_ has quit [Remote host closed the connection]
drbrain has joined #ruby-core
drbrain has quit [Ping timeout: 264 seconds]
carlosan_ has joined #ruby-core
carlosan_ has quit [Remote host closed the connection]
cyri_ has quit [Quit: cyri_]
carlosantonio has joined #ruby-core
cyri_ has joined #ruby-core
enebo has joined #ruby-core
headius has joined #ruby-core
carlosantonio has quit [Remote host closed the connection]
carlosantonio has joined #ruby-core
drbrain has joined #ruby-core
carlosantonio has quit [Remote host closed the connection]
drbrain has quit [Ping timeout: 250 seconds]
enebo has quit [Quit: enebo]
headius has quit [Quit: headius]
cyri_ has quit [Quit: cyri_]
davidbalbert is now known as davidbalber|away
davidbalber|away is now known as davidbalbert
cyri_ has joined #ruby-core
drbrain has joined #ruby-core
drbrain has quit [Ping timeout: 244 seconds]
<znz_v>
biff: [ruby-changes:26585] naruse:r38636 (trunk): * def/id.def: use split(/^/) instead of String#lines to support - http://mla.n-z.jp/?ruby-changes=26585
kosaki8 has quit [Quit: Leaving...]
drbrain has joined #ruby-core
drbrain has quit [Ping timeout: 252 seconds]
__BigO__ has quit [Remote host closed the connection]
carlosantonio has joined #ruby-core
drbrain has joined #ruby-core
carlosantonio has quit [Remote host closed the connection]