[macruby-changes] [4566] MacRubyWebsite/trunk/content/blog/2010/10/01/macruby07.txt

source_changes at macosforge.org source_changes at macosforge.org
Fri Oct 1 18:34:44 PDT 2010


Revision: 4566
          http://trac.macosforge.org/projects/ruby/changeset/4566
Author:   lsansonetti at apple.com
Date:     2010-10-01 18:34:42 -0700 (Fri, 01 Oct 2010)
Log Message:
-----------
minor fixes

Modified Paths:
--------------
    MacRubyWebsite/trunk/content/blog/2010/10/01/macruby07.txt

Modified: MacRubyWebsite/trunk/content/blog/2010/10/01/macruby07.txt
===================================================================
--- MacRubyWebsite/trunk/content/blog/2010/10/01/macruby07.txt	2010-10-01 21:28:47 UTC (rev 4565)
+++ MacRubyWebsite/trunk/content/blog/2010/10/01/macruby07.txt	2010-10-02 01:34:42 UTC (rev 4566)
@@ -41,7 +41,7 @@
 3
 </pre>
 
-The "sandbox(7)":http://developer.apple.com/library/mac/#documentation/Darwin/Reference/ManPages/man7/sandbox.7.html facility is now exposed in MacRuby via the Sandbox class, and can now be used to filter certain functionalities in the current process and therefore limit potential damage that can happen if a vulnerability is exploited. It is a good companion to the Ruby standard $SAFE functionality, also supported in MacRuby, because it can constrain access to all system services used by the process, including by C extensions or Cocoa APIs, not just from pure-Ruby APIs.
+The "sandbox(7)":http://developer.apple.com/library/mac/#documentation/Darwin/Reference/ManPages/man7/sandbox.7.html facility is now exposed in MacRuby via the Sandbox class, and can now be used to restrict access to certain facilities in the current process and therefore limit potential damage that can happen if a vulnerability is exploited. It is a good companion to the Ruby standard $SAFE functionality, also supported in MacRuby, because it can constrain access to all system services used by the process, including by C extensions or Cocoa APIs, not just from pure-Ruby APIs.
 
 <pre class="commands">
 Sandbox.no_internet          # TCP/IP networking is prohibited.
@@ -59,7 +59,7 @@
 
 h3. Concurrency and Performance
 
-The dispatcher has been rewritten to use a per-thread cache, which is a more efficient approach compared to the previous release. All reported deadlocks have been fixed. We have been successfully running Sinatra applications under the "ControlTower HTTP server":/blog/2010/09/20/announcing-control-tower.html in a concurrent fashion for the past weeks.
+The dispatcher has been rewritten to use a per-thread cache, which is a more efficient approach compared to the previous release. All reported race conditions and deadlocks have been fixed. We have been successfully running Sinatra applications under the "ControlTower HTTP server":/blog/2010/09/20/announcing-control-tower.html in a concurrent fashion for the past weeks.
 
 The MacRuby kernel, which contains the primitive functions called by the code generated by the compiler, is now pre-compiled into bitcode and included in the program's module. Further optimization passes can now be applied and result in a significant runtime performance improvement.
 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.macosforge.org/pipermail/macruby-changes/attachments/20101001/fc4a8fa2/attachment.html>


More information about the macruby-changes mailing list