* multi-tk.rb: modify security check at creating a new interpreter

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@4534 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

1 files changed, 12 insertions, 4 deletions

diff --git a/ext/tk/lib/multi-tk.rb b/ext/tk/lib/multi-tk.rb
index 7053dddef9..750a2b79d9 100644
--- a/ext/tk/lib/multi-tk.rb
+++ b/ext/tk/lib/multi-tk.rb
@@ -459,12 +459,20 @@ class MultiTkIp
   ######################################
 
   def initialize(master, safeip=true, keys={})
-    if safeip == nil && !master.master?
-      fail SecurityError, "slave-ip cannot create master-ip"
+    if $SAFE >= 4
+      fail SecurityError, "cannot create a new interpreter at level #{$SAFE}"
+    end
+
+    if safeip == nil && $SAFE >= 2
+      fail SecurityError, "cannot create a master-ip at level #{$SAFE}"
     end
 
-    if safeip == nil && $SAFE >= 4
-      fail SecurityError, "cannot create master-ip at level #{$SAFE}"
+    if !master.master? && master.safe?
+      fail SecurityError, "safe-slave-ip cannot create a new interpreter"
+    end
+
+    if safeip == nil && !master.master?
+      fail SecurityError, "slave-ip cannot create a master-ip"
     end
 
     unless keys.kind_of? Hash