I like that a lot. Nice idea, if a little dangerous. I'm assuming it's jailed because all the system headers are there.

Just a heads-up- your 'about' says Ruby code instead of C.

How do you make sure people don't do something bad?

       system("cat /proc/self/cgroup");