Revision: 4566 http://trac.macosforge.org/projects/ruby/changeset/4566 Author: lsansonetti@apple.com Date: 2010-10-01 18:34:42 -0700 (Fri, 01 Oct 2010) Log Message: ----------- minor fixes Modified Paths: -------------- MacRubyWebsite/trunk/content/blog/2010/10/01/macruby07.txt Modified: MacRubyWebsite/trunk/content/blog/2010/10/01/macruby07.txt =================================================================== --- MacRubyWebsite/trunk/content/blog/2010/10/01/macruby07.txt 2010-10-01 21:28:47 UTC (rev 4565) +++ MacRubyWebsite/trunk/content/blog/2010/10/01/macruby07.txt 2010-10-02 01:34:42 UTC (rev 4566) @@ -41,7 +41,7 @@ 3 </pre> -The "sandbox(7)":http://developer.apple.com/library/mac/#documentation/Darwin/Reference/ManPa... facility is now exposed in MacRuby via the Sandbox class, and can now be used to filter certain functionalities in the current process and therefore limit potential damage that can happen if a vulnerability is exploited. It is a good companion to the Ruby standard $SAFE functionality, also supported in MacRuby, because it can constrain access to all system services used by the process, including by C extensions or Cocoa APIs, not just from pure-Ruby APIs. +The "sandbox(7)":http://developer.apple.com/library/mac/#documentation/Darwin/Reference/ManPa... facility is now exposed in MacRuby via the Sandbox class, and can now be used to restrict access to certain facilities in the current process and therefore limit potential damage that can happen if a vulnerability is exploited. It is a good companion to the Ruby standard $SAFE functionality, also supported in MacRuby, because it can constrain access to all system services used by the process, including by C extensions or Cocoa APIs, not just from pure-Ruby APIs. <pre class="commands"> Sandbox.no_internet # TCP/IP networking is prohibited. @@ -59,7 +59,7 @@ h3. Concurrency and Performance -The dispatcher has been rewritten to use a per-thread cache, which is a more efficient approach compared to the previous release. All reported deadlocks have been fixed. We have been successfully running Sinatra applications under the "ControlTower HTTP server":/blog/2010/09/20/announcing-control-tower.html in a concurrent fashion for the past weeks. +The dispatcher has been rewritten to use a per-thread cache, which is a more efficient approach compared to the previous release. All reported race conditions and deadlocks have been fixed. We have been successfully running Sinatra applications under the "ControlTower HTTP server":/blog/2010/09/20/announcing-control-tower.html in a concurrent fashion for the past weeks. The MacRuby kernel, which contains the primitive functions called by the code generated by the compiler, is now pre-compiled into bitcode and included in the program's module. Further optimization passes can now be applied and result in a significant runtime performance improvement.