def pull(from, to)
    from = File.join @path, from
    return nil unless File.exist? from
    
    FileUtils.cp_r from, to
    FileUtils.chmod_R 0770, to
    FileUtils.chown_R @admin_uid, @admin_gid, to
    # NOTE: making a file / directory read-only is useless -- the sandboxed
    #       process can replace the file with another copy of the file; this can
    #       be worked around by noting the inode number of the protected file /
    #       dir, and making a hard link to it somewhere else so the inode won't
    #       be reused.
    
    to
  end
def pull(from, to)
    from = File.join @path, from
    return nil unless File.exist? from
    
    FileUtils.cp_r from, to
    FileUtils.chmod_R 0770, to
    FileUtils.chown_R @admin_uid, @admin_gid, to
    # NOTE: making a file / directory read-only is useless -- the sandboxed
    #       process can replace the file with another copy of the file; this can
    #       be worked around by noting the inode number of the protected file /
    #       dir, and making a hard link to it somewhere else so the inode won't
    #       be reused.
    
    to
  end
Copies a file or directory from the sandbox.

 @param [String] from relative path to the sandbox file or directory
 @param [String] to path where the file/directory will be copied
 @param [Hash] options tweaks the permissions and the path inside the sandbox
 @return [String] the path to the copied file / directory outside the
                  sandbox, or nil if the file / directory does not exist
                  inside the sandbox