This test shows that system calls can still be made with no privileges given

System Call Test

require "test/unit"
require "rubygems"
require "shikashi"

class SystemCalls <  Test::Unit::TestCase
  
  def test_backtick_call_should_raise_error
    priv = Shikashi::Privileges.new
    assert_raise SecurityError do
      Shikashi::Sandbox.new.run("`ls`", priv)
    end
  end
  
  def test_percent_x_call_should_raise_error
    priv = Shikashi::Privileges.new
    assert_raise SecurityError do
      Shikashi::Sandbox.new.run("%x[ls]", priv)
    end
  end
  
  def test_system_call_should_raise_error
    priv = Shikashi::Privileges.new
    assert_raise SecurityError do
      Shikashi::Sandbox.new.run("system('ls')", priv)
    end
  end
  
  def test_exec_call_should_raise_error
    priv = Shikashi::Privileges.new
    assert_raise SecurityError do
      Shikashi::Sandbox.new.run("exec('ls')", priv)
    end
  end

end