exec_sandbox 0.2.3 → 0.2.4

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: a5ba917057f393e64b4b5543f35e9373beeb5bc0
+  data.tar.gz: ac8bd31a735584032a8801cb015a27affd5c0bdb
+SHA512:
+  metadata.gz: 701e43695402f05185797c24998571bebd1ee687d707521a5071cea29f07e7a2fcb555e8fea2948121f2a8582d236443845d8839f1c0a09df823b7b21bdf0ac4
+  data.tar.gz: c8d0d3211d76cd99fcd7165ec984aee35eb5946b42e1030b0faa10eb3663fa07c78b4de88343f710f167264839e4980abedb6dda8c4a8cdc7dade2d88d8b8f78

data/Gemfile

@@ -1,18 +1,16 @@
-source :rubygems
+source 'https://rubygems.org'
+
 # Add dependencies required to use your gem here.
-# Example:
-#   gem 'activesupport', '>= 2.3.5'
-gem 'ffi', '>= 1.0.11'
+gem 'ffi', '>= 1.9.3'
 
 # Add dependencies to develop your gem here.
 # Include everything needed to run rake, tests, features, etc.
 group :development do
   gem 'rdoc', '>= 3.10'
-  gem 'rspec', '>= 2.8.0'
-  gem 'yard', '>= 0.7.5'
+  gem 'rspec', '>= 2.14.1'
+  gem 'yard', '>= 0.8.7.3'
   gem 'yard-rspec', '>= 0.1'
-  gem 'bundler', '>= 1.0.21'
-  gem 'jeweler', '>= 1.8.3'
-  gem 'rcov', '>= 0', :platform => [:mri_18]
-  gem 'simplecov', '>= 0', :platform => [:mri_19]
+  gem 'bundler', '>= 1.3.5'
+  gem 'jeweler', '>= 2.0.1'
+  gem 'simplecov', '>= 0', :platform => :mri
 end

data/Gemfile.lock

@@ -1,33 +1,67 @@
 GEM
-  remote: http://rubygems.org/
+  remote: https://rubygems.org/
   specs:
-    diff-lcs (1.1.3)
-    ffi (1.0.11)
-    git (1.2.5)
-    jeweler (1.8.3)
-      bundler (~> 1.0)
+    addressable (2.3.5)
+    builder (3.2.2)
+    descendants_tracker (0.0.3)
+    diff-lcs (1.2.5)
+    docile (1.1.3)
+    faraday (0.9.0)
+      multipart-post (>= 1.2, < 3)
+    ffi (1.9.3)
+    git (1.2.6)
+    github_api (0.11.2)
+      addressable (~> 2.3)
+      descendants_tracker (~> 0.0.1)
+      faraday (~> 0.8, < 0.10)
+      hashie (>= 1.2)
+      multi_json (>= 1.7.5, < 2.0)
+      nokogiri (~> 1.6.0)
+      oauth2
+    hashie (2.0.5)
+    highline (1.6.20)
+    jeweler (2.0.1)
+      builder
+      bundler (>= 1.0)
       git (>= 1.2.5)
+      github_api
+      highline (>= 1.6.15)
+      nokogiri (>= 1.5.10)
       rake
       rdoc
-    json (1.6.5)
-    multi_json (1.0.4)
-    rake (0.9.2.2)
-    rcov (1.0.0)
-    rdoc (3.12)
+    json (1.8.1)
+    jwt (0.1.11)
+      multi_json (>= 1.5)
+    mini_portile (0.5.2)
+    multi_json (1.8.4)
+    multi_xml (0.5.5)
+    multipart-post (2.0.0)
+    nokogiri (1.6.1)
+      mini_portile (~> 0.5.0)
+    oauth2 (0.9.3)
+      faraday (>= 0.8, < 0.10)
+      jwt (~> 0.1.8)
+      multi_json (~> 1.3)
+      multi_xml (~> 0.5)
+      rack (~> 1.2)
+    rack (1.5.2)
+    rake (10.1.1)
+    rdoc (4.1.1)
       json (~> 1.4)
-    rspec (2.8.0)
-      rspec-core (~> 2.8.0)
-      rspec-expectations (~> 2.8.0)
-      rspec-mocks (~> 2.8.0)
-    rspec-core (2.8.0)
-    rspec-expectations (2.8.0)
-      diff-lcs (~> 1.1.2)
-    rspec-mocks (2.8.0)
-    simplecov (0.5.4)
-      multi_json (~> 1.0.3)
-      simplecov-html (~> 0.5.3)
-    simplecov-html (0.5.3)
-    yard (0.7.5)
+    rspec (2.14.1)
+      rspec-core (~> 2.14.0)
+      rspec-expectations (~> 2.14.0)
+      rspec-mocks (~> 2.14.0)
+    rspec-core (2.14.7)
+    rspec-expectations (2.14.5)
+      diff-lcs (>= 1.1.3, < 2.0)
+    rspec-mocks (2.14.5)
+    simplecov (0.8.2)
+      docile (~> 1.1.0)
+      multi_json
+      simplecov-html (~> 0.8.0)
+    simplecov-html (0.8.0)
+    yard (0.8.7.3)
     yard-rspec (0.1)
       yard
 
@@ -35,12 +69,11 @@ PLATFORMS
   ruby
 
 DEPENDENCIES
-  bundler (>= 1.0.21)
-  ffi (>= 1.0.11)
-  jeweler (>= 1.8.3)
-  rcov
+  bundler (>= 1.3.5)
+  ffi (>= 1.9.3)
+  jeweler (>= 2.0.1)
   rdoc (>= 3.10)
-  rspec (>= 2.8.0)
+  rspec (>= 2.14.1)
   simplecov
-  yard (>= 0.7.5)
+  yard (>= 0.8.7.3)
   yard-rspec (>= 0.1)

data/VERSION

@@ -1 +1 @@
-0.2.3
+0.2.4

data/exec_sandbox.gemspec

@@ -2,14 +2,15 @@
 # DO NOT EDIT THIS FILE DIRECTLY
 # Instead, edit Jeweler::Tasks in Rakefile, and run 'rake gemspec'
 # -*- encoding: utf-8 -*-
+# stub: exec_sandbox 0.2.4 ruby lib
 
 Gem::Specification.new do |s|
   s.name = "exec_sandbox"
-  s.version = "0.2.3"
+  s.version = "0.2.4"
 
   s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
   s.authors = ["Victor Costan"]
-  s.date = "2012-02-09"
+  s.date = "2014-02-05"
   s.description = "Temporary users and groups, rlimits"
   s.email = "costan@gmail.com"
   s.extra_rdoc_files = [
@@ -50,42 +51,39 @@ Gem::Specification.new do |s|
   s.homepage = "http://github.com/pwnall/exec_sandbox"
   s.licenses = ["MIT"]
   s.require_paths = ["lib"]
-  s.rubygems_version = "1.8.15"
+  s.rubygems_version = "2.1.11"
   s.summary = "Run foreign binaries using POSIX sandboxing features"
 
   if s.respond_to? :specification_version then
-    s.specification_version = 3
+    s.specification_version = 4
 
     if Gem::Version.new(Gem::VERSION) >= Gem::Version.new('1.2.0') then
-      s.add_runtime_dependency(%q<ffi>, [">= 1.0.11"])
+      s.add_runtime_dependency(%q<ffi>, [">= 1.9.3"])
       s.add_development_dependency(%q<rdoc>, [">= 3.10"])
-      s.add_development_dependency(%q<rspec>, [">= 2.8.0"])
-      s.add_development_dependency(%q<yard>, [">= 0.7.5"])
+      s.add_development_dependency(%q<rspec>, [">= 2.14.1"])
+      s.add_development_dependency(%q<yard>, [">= 0.8.7.3"])
       s.add_development_dependency(%q<yard-rspec>, [">= 0.1"])
-      s.add_development_dependency(%q<bundler>, [">= 1.0.21"])
-      s.add_development_dependency(%q<jeweler>, [">= 1.8.3"])
-      s.add_development_dependency(%q<rcov>, [">= 0"])
+      s.add_development_dependency(%q<bundler>, [">= 1.3.5"])
+      s.add_development_dependency(%q<jeweler>, [">= 2.0.1"])
       s.add_development_dependency(%q<simplecov>, [">= 0"])
     else
-      s.add_dependency(%q<ffi>, [">= 1.0.11"])
+      s.add_dependency(%q<ffi>, [">= 1.9.3"])
       s.add_dependency(%q<rdoc>, [">= 3.10"])
-      s.add_dependency(%q<rspec>, [">= 2.8.0"])
-      s.add_dependency(%q<yard>, [">= 0.7.5"])
+      s.add_dependency(%q<rspec>, [">= 2.14.1"])
+      s.add_dependency(%q<yard>, [">= 0.8.7.3"])
       s.add_dependency(%q<yard-rspec>, [">= 0.1"])
-      s.add_dependency(%q<bundler>, [">= 1.0.21"])
-      s.add_dependency(%q<jeweler>, [">= 1.8.3"])
-      s.add_dependency(%q<rcov>, [">= 0"])
+      s.add_dependency(%q<bundler>, [">= 1.3.5"])
+      s.add_dependency(%q<jeweler>, [">= 2.0.1"])
       s.add_dependency(%q<simplecov>, [">= 0"])
     end
   else
-    s.add_dependency(%q<ffi>, [">= 1.0.11"])
+    s.add_dependency(%q<ffi>, [">= 1.9.3"])
     s.add_dependency(%q<rdoc>, [">= 3.10"])
-    s.add_dependency(%q<rspec>, [">= 2.8.0"])
-    s.add_dependency(%q<yard>, [">= 0.7.5"])
+    s.add_dependency(%q<rspec>, [">= 2.14.1"])
+    s.add_dependency(%q<yard>, [">= 0.8.7.3"])
     s.add_dependency(%q<yard-rspec>, [">= 0.1"])
-    s.add_dependency(%q<bundler>, [">= 1.0.21"])
-    s.add_dependency(%q<jeweler>, [">= 1.8.3"])
-    s.add_dependency(%q<rcov>, [">= 0"])
+    s.add_dependency(%q<bundler>, [">= 1.3.5"])
+    s.add_dependency(%q<jeweler>, [">= 2.0.1"])
     s.add_dependency(%q<simplecov>, [">= 0"])
   end
 end

data/lib/exec_sandbox/sandbox.rb

@@ -26,7 +26,7 @@ class Sandbox
     @destroyed = false
     
     # principal argument for Spawn.spawn()
-    @principal = { :uid => @user_uid, :gid => @user_gid, :dir => @path }
+    @principal = { uid: @user_uid, gid: @user_gid, dir: @path }
   end
   
   # Copies a file or directory to the sandbox.

data/lib/exec_sandbox/spawn.rb

@@ -7,7 +7,7 @@ module Spawn
   #
   # @param [String, Array] command the command to be executed via exec
   # @param [Hash] io see limit_io
-  # @param [Hash] principal the principal for the enw process
+  # @param [Hash] principal the principal for the new process
   # @param [Hash] resources see limit_resources
   # @return [Fixnum] the child's PID
   def self.spawn(command, io = {}, principal = {}, resources = {})
@@ -40,10 +40,10 @@ module Spawn
         redirects << [k, redirects.length, v]
       end
     end
-    
+
     # Perform the redirections.
     redirects.sort!
-    redirects.each do |fd_num, _, target|    
+    redirects.each do |fd_num, _, target|
       if target.respond_to?(:fileno)
         # IO stream.
         if target.fileno != fd_num
@@ -60,26 +60,18 @@ module Spawn
         end
       end
     end
-    
+
     # Close all file descriptors not in the redirection table.
     redirected_fds = Set.new redirects.map(&:first)
     max_fd = LibC.getdtablesize
     0.upto(max_fd) do |fd|
       next if redirected_fds.include?(fd)
-      
-      # TODO(pwnall): this is slow; consider detecting the Ruby version and
-      #               only running it on buggy MRIs
-      begin
-        # This fails if rb_reserved_fd_p returns 0.
-        # In that case, we shouldn't close the FD, otherwise the VM will crash.
-        IO.new(fd)
-      rescue ArgumentError, Errno::EBADF
-        next
-      end
+
+      next if RubyVM.rb_reserved_fd_p(fd) != 0
       LibC.close fd
     end
   end
-  
+
   # Sets the process' principal for access control.
   #
   # @param [Hash] principal information about the process' principal
@@ -88,7 +80,7 @@ module Spawn
   # @option principal [Fixnum] :gid the new group ID
   def self.set_principal(principal)
     Dir.chdir principal[:dir] if principal[:dir]
-    
+
     if principal[:gid]
       begin
         Process::Sys.setresgid principal[:gid], principal[:gid], principal[:gid]
@@ -102,7 +94,7 @@ module Spawn
                            principal[:gid] || Process.gid
       rescue NotImplementedError
       end
-      
+
       begin
         Process::Sys.setresuid principal[:uid], principal[:uid], principal[:uid]
       rescue NotImplementedError
@@ -110,7 +102,7 @@ module Spawn
       end
     end
   end
-  
+
   # Constrains the resource usage of the current process.
   #
   # @param [Hash{Symbol => Number}] limits the constraints to be applied
@@ -150,7 +142,7 @@ module Spawn
       _setrlimit Process::RLIMIT_RSS, limits[:data]
     end
   end
-  
+
   # Wrapper for Process.setrlimit that eats exceptions.
   def self._setrlimit(limit, value)
     begin
@@ -159,7 +151,7 @@ module Spawn
       # The call failed, probably because the limit is already lower than this.
     end
   end
-  
+
   # Maps raw I/O functions.
   module LibC
     extend FFI::Library
@@ -168,6 +160,28 @@ module Spawn
     attach_function :getdtablesize, [], :int
     attach_function :dup2, [:int, :int], :int
   end  # module ExecSandbox::Spawn::Libc
+
+  # Maps an internal MRI function that we need.
+  module RubyVM
+    extend FFI::Library
+    ffi_lib RbConfig::CONFIG['LIBRUBY']
+    begin
+      attach_function :rb_reserved_fd_p, [:int], :int
+    rescue FFI::NotFoundError
+      # Emulation of internal MRI function.
+      #
+      # This is a fallback, used in case FFI can't find the MRI function.
+      def self.rb_reserved_fd_p(fd)
+        begin
+          # This fails if rb_reserved_fd_p returns a non-zero value.
+          IO.new fd
+          return 0
+        rescue ArgumentError, Errno::EBADF
+          return 1
+        end
+      end
+    end
+  end
 end  # module ExecSandbox::Spawn
-  
+
 end  # namespace ExecSandbox

data/lib/exec_sandbox/wait4.rb

@@ -13,15 +13,15 @@ module Wait4
     rusage = ExecSandbox::Wait4::Rusage.new
     returned_pid = LibC.wait4(pid, status_ptr, 0, rusage.pointer)
     raise SystemCallError, FFI.errno if returned_pid < 0
-    status = { :bits => status_ptr.read_int }
+    status = { bits: status_ptr.read_int }
     status_ptr.free
-    
+
     signal_code = status[:bits] & 0x7f
     status[:exit_code] = (signal_code != 0) ? -signal_code : status[:bits] >> 8
     status[:user_time] = rusage[:ru_utime_sec] +
                          rusage[:ru_utime_usec] * 0.000_001
     status[:system_time] = rusage[:ru_stime_sec] +
-                           rusage[:ru_stime_usec] * 0.000_001 
+                           rusage[:ru_stime_usec] * 0.000_001
     status[:rss] = rusage[:ru_maxrss] / 1024.0
     return status
   end
@@ -31,9 +31,9 @@ module Wait4
     extend FFI::Library
     ffi_lib FFI::Library::LIBC
     attach_function :wait4, [:int, :pointer, :int, :pointer], :int,
-                    :blocking => true
+                    blocking: true
   end  # module ExecSandbox::Wait4::Libc
-  
+
   # Maps struct rusage in sys/resource.h, used by wait4.
   class Rusage < FFI::Struct
     # Total amount of user time used.
@@ -81,5 +81,5 @@ module Wait4
   end  # struct ExecSandbox::Wait4::Rusage
 
 end  # module ExecSandbox::Wait4
-  
+
 end  # namespace ExecSandbox

data/spec/exec_sandbox/sandbox_spec.rb

@@ -1,6 +1,6 @@
 require File.expand_path(File.dirname(__FILE__) + '/../spec_helper')
 
-describe ExecSandbox::Sandbox do  
+describe ExecSandbox::Sandbox do
   describe 'IO redirection' do
     before do
       @temp_in = Tempfile.new 'exec_sandbox_rspec'
@@ -17,55 +17,55 @@ describe ExecSandbox::Sandbox do
     describe 'duplicate.rb' do
       before do
         ExecSandbox.use do |s|
-          @result = s.run bin_fixture(:duplicate), :in => @temp_in.path,
-                                                   :out => @temp_out.path
+          @result = s.run bin_fixture(:duplicate), in: @temp_in.path,
+                                                   out: @temp_out.path
         end
       end
 
       it 'should not crash' do
         @result[:exit_code].should == 0
       end
-      
+
       it 'should produce the correct result' do
-        File.read(@temp_out.path).should == "I/O test\nI/O test\n" 
+        File.read(@temp_out.path).should == "I/O test\nI/O test\n"
       end
     end
 
     describe 'count.rb' do
       before do
         ExecSandbox.use do |s|
-          @result = s.run [bin_fixture(:count), '9'], :in => @temp_in.path,
-              :out => @temp_out.path, :err => :out
+          @result = s.run [bin_fixture(:count), '9'], in: @temp_in.path,
+              out: @temp_out.path, err: :out
         end
       end
-      
+
       it 'should not crash' do
         @result[:exit_code].should == 0
       end
-      
+
       it 'should produce the correct result' do
         File.read(@temp_out.path).should == (1..9).map { |i| "#{i}\n" }.join('')
       end
     end
   end
-  
+
   describe 'pipe redirection' do
     describe 'duplicate.rb' do
       before do
         ExecSandbox.use do |s|
-          @result = s.run bin_fixture(:duplicate), :in_data => "Pipe test\n"
+          @result = s.run bin_fixture(:duplicate), in_data: "Pipe test\n"
         end
       end
-      
+
       it 'should not crash' do
         @result[:exit_code].should == 0
       end
-      
+
       it 'should produce the correct result' do
         @result[:out_data].should == "Pipe test\nPipe test\n"
       end
     end
-    
+
     describe 'buffer.rb' do
       let(:buffer_size) { 1024 * 1024 }
       before do
@@ -73,34 +73,34 @@ describe ExecSandbox::Sandbox do
           @result = s.run [bin_fixture(:buffer), '', buffer_size.to_s]
         end
       end
-      
+
       it 'should not crash' do
         @result[:exit_code].should == 0
       end
-      
+
       it 'should produce the correct result' do
         @result[:out_data].should == "S" * buffer_size
       end
     end
-    
+
     describe 'count.rb' do
       before do
         ExecSandbox.use do |s|
-          @result = s.run [bin_fixture(:count), '9'], :err => :out
+          @result = s.run [bin_fixture(:count), '9'], err: :out
         end
       end
-      
+
       it 'should not crash' do
         @result[:exit_code].should == 0
       end
-      
+
       it 'should produce the correct result' do
         @result[:out_data].should == (1..9).map { |i| "#{i}\n" }.join('')
       end
     end
   end
-  
-  
+
+
   describe 'resource limitations' do
     describe 'churn.rb' do
       before do
@@ -110,7 +110,7 @@ describe ExecSandbox::Sandbox do
       after do
         @temp_out.unlink
       end
-      
+
       describe 'without limitations' do
         before do
           ExecSandbox.use do |s|
@@ -118,44 +118,44 @@ describe ExecSandbox::Sandbox do
             s.pull 'stdout', @temp_out.path
           end
         end
-  
+
         it 'should not crash' do
           @result[:exit_code].should == 0
         end
-        
+
         it 'should run for at least 2 seconds' do
           (@result[:user_time] + @result[:system_time]).should > 2
         end
-        
+
         it 'should output something' do
           File.stat(@temp_out.path).size.should > 0
         end
       end
-      
+
       describe 'with CPU time limitation' do
         before do
           ExecSandbox.use do |s|
             @result = s.run [bin_fixture(:churn), 'stdout', 3.to_s],
-                            :limits => {:cpu => 1}
+                            limits: {cpu: 1}
             s.pull 'stdout', @temp_out.path
           end
         end
-  
+
         it 'should run for at least 0.5 seconds' do
           (@result[:user_time] + @result[:system_time]).should >= 0.5
         end
-  
+
         it 'should run for less than 2 seconds' do
           (@result[:user_time] + @result[:system_time]).should < 2
         end
-        
+
         it 'should not have a chance to output' do
           File.stat(@temp_out.path).size.should == 0
         end
       end
     end
   end
-  
+
   describe '#push' do
     let(:test_user) { Etc.getlogin }
     let(:test_uid) { Etc.getpwnam(test_user).uid }
@@ -166,49 +166,48 @@ describe ExecSandbox::Sandbox do
       @sandbox = ExecSandbox.open test_user
     end
     after do
-      @sandbox.close
+      @sandbox.close if @sandbox
     end
-    
+
     describe 'a file' do
       before do
         @to = @sandbox.push __FILE__
       end
-      
+
       it 'should copy straight to the sandbox directory' do
         File.dirname(@to).should == @sandbox.path
       end
-      
+
       it 'should use the same file name' do
-        File.basename(@to).should == 'sandbox_spec.rb' 
+        File.basename(@to).should == 'sandbox_spec.rb'
       end
-      
+
       it "should set the file's owner to the admin" do
         File.stat(@to).uid.should == test_uid
       end
-      
+
       it "should not set the file's group to the admin" do
         File.stat(@to).gid.should_not == test_gid
       end
     end
   end
-  
+
   describe '#cleanup' do
     describe 'in a system with an open sandbox' do
       before do
         @all_users = ExecSandbox::Users.named(/.*/).sort
-        
+
         @sandbox = ExecSandbox.open
         @removed = ExecSandbox::Sandbox.cleanup
       end
-      
+
       it 'should not remove the sandbox user' do
         ExecSandbox::Users.named(/.*/).sort.should == @all_users
       end
-      
+
       it 'should return an array with the sandbox user' do
         @removed.should == [@sandbox.user_name]
       end
     end
-    
   end
 end

data/spec/exec_sandbox/spawn_spec.rb

@@ -49,8 +49,8 @@ describe ExecSandbox::Spawn do
     describe 'with paths' do
       before do
         pid = ExecSandbox::Spawn.spawn bin_fixture(:duplicate),
-            {:in => @temp_in.path, :out => @temp_out.path,
-             :err => @temp_out.path}
+            {in: @temp_in.path, out: @temp_out.path,
+             err: @temp_out.path}
         @status = ExecSandbox::Wait4.wait4 pid
       end
 
@@ -62,7 +62,7 @@ describe ExecSandbox::Spawn do
         File.open(@temp_in.path, 'r') do |in_io|
           File.open(@temp_out.path, 'w') do |out_io|
             pid = ExecSandbox::Spawn.spawn bin_fixture(:duplicate),
-                {:in => in_io, :out => out_io, :err => STDERR}
+                {in: in_io, out: out_io, err: STDERR}
             @status = ExecSandbox::Wait4.wait4 pid
           end
         end
@@ -74,7 +74,7 @@ describe ExecSandbox::Spawn do
     describe 'without stdout' do
       before do
         pid = ExecSandbox::Spawn.spawn bin_fixture(:duplicate),
-                                       {:in => @temp_in.path}
+                                       {in: @temp_in.path}
         @status = ExecSandbox::Wait4.wait4 pid
       end
       
@@ -103,7 +103,7 @@ describe ExecSandbox::Spawn do
         File.open(@temp_in.path, 'r') do |in_io|
           File.open(@temp_out.path, 'w') do |out_io|
             pid = ExecSandbox::Spawn.spawn [bin_fixture(:count), '9'],
-                {:in => in_io, :out => out_io, :err => STDOUT}
+                {in: in_io, out: out_io, err: STDOUT}
             @status = ExecSandbox::Wait4.wait4 pid
           end
         end
@@ -126,8 +126,8 @@ describe ExecSandbox::Spawn do
     describe 'with root credentials' do
       before do
         pid = ExecSandbox::Spawn.spawn [bin_fixture(:write_arg),
-            @temp_path, "Spawn uid test\n"], {:err => STDERR},
-            {:uid => 0, :gid => 0}
+            @temp_path, "Spawn uid test\n"], {err: STDERR},
+            {uid: 0, gid: 0}
         @status = ExecSandbox::Wait4.wait4 pid
         @fstat = File.stat(@temp_path)
       end
@@ -152,8 +152,8 @@ describe ExecSandbox::Spawn do
       before do
         @temp.unlink
         pid = ExecSandbox::Spawn.spawn [bin_fixture(:write_arg),
-            @temp_path, "Spawn uid test\n"], {:err => STDERR},
-            {:uid => test_uid, :gid => test_gid}
+            @temp_path, "Spawn uid test\n"], {err: STDERR},
+            {uid: test_uid, gid: test_gid}
         @status = ExecSandbox::Wait4.wait4 pid
       end
       
@@ -178,7 +178,7 @@ describe ExecSandbox::Spawn do
         File.chmod 0700, @temp_path
         pid = ExecSandbox::Spawn.spawn [bin_fixture(:write_arg),
             @temp_path, "Spawn uid test\n"], {},
-            {:uid => test_uid, :gid => test_gid}
+            {uid: test_uid, gid: test_gid}
         @status = ExecSandbox::Wait4.wait4 pid
       end
       
@@ -196,7 +196,7 @@ describe ExecSandbox::Spawn do
         File.chmod 070, @temp_path
         pid = ExecSandbox::Spawn.spawn [bin_fixture(:write_arg), @temp_path,
             "Spawn uid test\n"], {},
-            {:uid => test_uid, :gid => test_gid}
+            {uid: test_uid, gid: test_gid}
         @status = ExecSandbox::Wait4.wait4 pid
       end
       
@@ -213,7 +213,7 @@ describe ExecSandbox::Spawn do
       before do
         @temp_dir = Dir.mktmpdir 'exec_sandbox_rspec'
         pid = ExecSandbox::Spawn.spawn [bin_fixture(:pwd), @temp_path],
-            {}, {:dir => @temp_dir}        
+            {}, {dir: @temp_dir}        
         @status = ExecSandbox::Wait4.wait4 pid
       end
       after do
@@ -244,7 +244,7 @@ describe ExecSandbox::Spawn do
       describe 'without limitations' do
         before do
           pid = ExecSandbox::Spawn.spawn [bin_fixture(:buffer), @temp_path,
-              (512 * 1024 * 1024).to_s], {:err => STDERR}, {}, {}
+              (512 * 1024 * 1024).to_s], {err: STDERR}, {}, {}
           @status = ExecSandbox::Wait4.wait4 pid
         end
 
@@ -260,7 +260,7 @@ describe ExecSandbox::Spawn do
       describe 'with 256mb memory limitation' do
         before do
           pid = ExecSandbox::Spawn.spawn [bin_fixture(:buffer), @temp_path,
-              (512 * 1024 * 1024).to_s], {}, {}, {:data => 256 * 1024 * 1024}
+              (512 * 1024 * 1024).to_s], {}, {}, {data: 256 * 1024 * 1024}
           @status = ExecSandbox::Wait4.wait4 pid
         end
         
@@ -277,7 +277,7 @@ describe ExecSandbox::Spawn do
         before do
           pid = ExecSandbox::Spawn.spawn [bin_fixture(:buffer), @temp_path,
               (512 * 1024 * 1024).to_s], {}, {},
-              {:file_size => 64 * 1024 * 1024}
+              {file_size: 64 * 1024 * 1024}
           @status = ExecSandbox::Wait4.wait4 pid
         end
         
@@ -305,7 +305,7 @@ describe ExecSandbox::Spawn do
       describe 'without limitations' do
         before do
           pid = ExecSandbox::Spawn.spawn [bin_fixture(:buffer), @temp_path,
-              (128 * 1024 * 1024).to_s], {:err => STDERR}, {}, {}
+              (128 * 1024 * 1024).to_s], {err: STDERR}, {}, {}
           @status = ExecSandbox::Wait4.wait4 pid
         end
 
@@ -315,7 +315,7 @@ describe ExecSandbox::Spawn do
       describe 'with 256mb memory limitation' do
         before do
           pid = ExecSandbox::Spawn.spawn [bin_fixture(:buffer), @temp_path,
-              (128 * 1024 * 1024).to_s], {}, {}, {:data => 256 * 1024 * 1024}
+              (128 * 1024 * 1024).to_s], {}, {}, {data: 256 * 1024 * 1024}
           @status = ExecSandbox::Wait4.wait4 pid
         end
         
@@ -326,7 +326,7 @@ describe ExecSandbox::Spawn do
         before do
           pid = ExecSandbox::Spawn.spawn [bin_fixture(:buffer), @temp_path,
               (128 * 1024 * 1024).to_s], {}, {},
-              {:file_size => 256 * 1024 * 1024}
+              {file_size: 256 * 1024 * 1024}
           @status = ExecSandbox::Wait4.wait4 pid
         end
         
@@ -339,7 +339,7 @@ describe ExecSandbox::Spawn do
       describe 'without limitations' do
         before do
           pid = ExecSandbox::Spawn.spawn [bin_fixture(:fork), @temp_path,
-              10.to_s], {:err => STDERR}, {}, {}
+              10.to_s], {err: STDERR}, {}, {}
           @status = ExecSandbox::Wait4.wait4 pid
         end
 
@@ -355,7 +355,7 @@ describe ExecSandbox::Spawn do
       describe 'with sub-process limitation' do
         before do
           pid = ExecSandbox::Spawn.spawn [bin_fixture(:fork), @temp_path,
-              10.to_s], {}, {}, {:processes => 4}
+              10.to_s], {}, {}, {processes: 4}
           @status = ExecSandbox::Wait4.wait4 pid
         end
         
@@ -373,7 +373,7 @@ describe ExecSandbox::Spawn do
       describe 'without limitations' do
         before do
           pid = ExecSandbox::Spawn.spawn [bin_fixture(:churn), @temp_path,
-              3.to_s], {:err => STDERR}, {}, {}
+              3.to_s], {err: STDERR}, {}, {}
           @status = ExecSandbox::Wait4.wait4 pid
         end
 
@@ -393,7 +393,7 @@ describe ExecSandbox::Spawn do
       describe 'with CPU time limitation' do
         before do
           pid = ExecSandbox::Spawn.spawn [bin_fixture(:churn), @temp_path,
-              10.to_s], {}, {}, {:cpu => 1}
+              10.to_s], {}, {}, {cpu: 1}
           @status = ExecSandbox::Wait4.wait4 pid
         end
 

metadata

@@ -1,115 +1,127 @@
 --- !ruby/object:Gem::Specification
 name: exec_sandbox
 version: !ruby/object:Gem::Version
-  version: 0.2.3
-  prerelease: 
+  version: 0.2.4
 platform: ruby
 authors:
 - Victor Costan
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2012-02-09 00:00:00.000000000Z
+date: 2014-02-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: ffi
-  requirement: &25139320 !ruby/object:Gem::Requirement
-    none: false
+  requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ! '>='
+    - - '>='
       - !ruby/object:Gem::Version
-        version: 1.0.11
+        version: 1.9.3
   type: :runtime
   prerelease: false
-  version_requirements: *25139320
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: 1.9.3
 - !ruby/object:Gem::Dependency
   name: rdoc
-  requirement: &25138680 !ruby/object:Gem::Requirement
-    none: false
+  requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ! '>='
+    - - '>='
       - !ruby/object:Gem::Version
         version: '3.10'
   type: :development
   prerelease: false
-  version_requirements: *25138680
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '3.10'
 - !ruby/object:Gem::Dependency
   name: rspec
-  requirement: &25138060 !ruby/object:Gem::Requirement
-    none: false
+  requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ! '>='
+    - - '>='
       - !ruby/object:Gem::Version
-        version: 2.8.0
+        version: 2.14.1
   type: :development
   prerelease: false
-  version_requirements: *25138060
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: 2.14.1
 - !ruby/object:Gem::Dependency
   name: yard
-  requirement: &25137500 !ruby/object:Gem::Requirement
-    none: false
+  requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ! '>='
+    - - '>='
       - !ruby/object:Gem::Version
-        version: 0.7.5
+        version: 0.8.7.3
   type: :development
   prerelease: false
-  version_requirements: *25137500
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: 0.8.7.3
 - !ruby/object:Gem::Dependency
   name: yard-rspec
-  requirement: &25136740 !ruby/object:Gem::Requirement
-    none: false
+  requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ! '>='
+    - - '>='
       - !ruby/object:Gem::Version
         version: '0.1'
   type: :development
   prerelease: false
-  version_requirements: *25136740
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0.1'
 - !ruby/object:Gem::Dependency
   name: bundler
-  requirement: &25135940 !ruby/object:Gem::Requirement
-    none: false
+  requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ! '>='
+    - - '>='
       - !ruby/object:Gem::Version
-        version: 1.0.21
+        version: 1.3.5
   type: :development
   prerelease: false
-  version_requirements: *25135940
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: 1.3.5
 - !ruby/object:Gem::Dependency
   name: jeweler
-  requirement: &25119740 !ruby/object:Gem::Requirement
-    none: false
+  requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ! '>='
+    - - '>='
       - !ruby/object:Gem::Version
-        version: 1.8.3
+        version: 2.0.1
   type: :development
   prerelease: false
-  version_requirements: *25119740
-- !ruby/object:Gem::Dependency
-  name: rcov
-  requirement: &25119080 !ruby/object:Gem::Requirement
-    none: false
+  version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ! '>='
+    - - '>='
       - !ruby/object:Gem::Version
-        version: '0'
-  type: :development
-  prerelease: false
-  version_requirements: *25119080
+        version: 2.0.1
 - !ruby/object:Gem::Dependency
   name: simplecov
-  requirement: &25117840 !ruby/object:Gem::Requirement
-    none: false
+  requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ! '>='
+    - - '>='
       - !ruby/object:Gem::Version
         version: '0'
   type: :development
   prerelease: false
-  version_requirements: *25117840
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0'
 description: Temporary users and groups, rlimits
 email: costan@gmail.com
 executables: []
@@ -150,29 +162,25 @@ files:
 homepage: http://github.com/pwnall/exec_sandbox
 licenses:
 - MIT
+metadata: {}
 post_install_message: 
 rdoc_options: []
 require_paths:
 - lib
 required_ruby_version: !ruby/object:Gem::Requirement
-  none: false
   requirements:
-  - - ! '>='
+  - - '>='
     - !ruby/object:Gem::Version
       version: '0'
-      segments:
-      - 0
-      hash: -1493873678505410753
 required_rubygems_version: !ruby/object:Gem::Requirement
-  none: false
   requirements:
-  - - ! '>='
+  - - '>='
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 1.8.15
+rubygems_version: 2.1.11
 signing_key: 
-specification_version: 3
+specification_version: 4
 summary: Run foreign binaries using POSIX sandboxing features
 test_files: []