Revision: 4565 http://trac.macosforge.org/projects/ruby/changeset/4565 Author: lsansonetti@apple.com Date: 2010-10-01 14:28:47 -0700 (Fri, 01 Oct 2010) Log Message: ----------- fix an english bug (thanks Ernie) Modified Paths: -------------- MacRubyWebsite/trunk/content/blog/2010/10/01/macruby07.txt Modified: MacRubyWebsite/trunk/content/blog/2010/10/01/macruby07.txt =================================================================== --- MacRubyWebsite/trunk/content/blog/2010/10/01/macruby07.txt 2010-10-01 21:20:22 UTC (rev 4564) +++ MacRubyWebsite/trunk/content/blog/2010/10/01/macruby07.txt 2010-10-01 21:28:47 UTC (rev 4565) @@ -41,7 +41,7 @@ 3 </pre> -The "sandbox(7)":http://developer.apple.com/library/mac/#documentation/Darwin/Reference/ManPa... facility is now exposed in MacRuby via the Sandbox class, and can now be used to filter certain functionalities in the current process and therefore limit potential damage that can happen if a vulnerability is exploited. It is a good companion to the Ruby standard $SAFE functionality, also supported in MacRuby, because it can enforce rules on all system services used by the process, including by C extensions or Cocoa APIs, and not necessarily those from pure-Ruby APIs. +The "sandbox(7)":http://developer.apple.com/library/mac/#documentation/Darwin/Reference/ManPa... facility is now exposed in MacRuby via the Sandbox class, and can now be used to filter certain functionalities in the current process and therefore limit potential damage that can happen if a vulnerability is exploited. It is a good companion to the Ruby standard $SAFE functionality, also supported in MacRuby, because it can constrain access to all system services used by the process, including by C extensions or Cocoa APIs, not just from pure-Ruby APIs. <pre class="commands"> Sandbox.no_internet # TCP/IP networking is prohibited.