Skip to content

Commit

Permalink
minor fixes
Browse files Browse the repository at this point in the history
git-svn-id: http://svn.macosforge.org/repository/ruby/MacRubyWebsite/trunk@4566 23306eb0-4c56-4727-a40e-e92c0eb68959
  • Loading branch information
lrz committed Oct 2, 2010
1 parent 780bf17 commit f910bba
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions content/blog/2010/10/01/macruby07.txt
Expand Up @@ -41,7 +41,7 @@ $ macruby t.rb
3
</pre>

The "sandbox(7)":http://developer.apple.com/library/mac/#documentation/Darwin/Reference/ManPages/man7/sandbox.7.html facility is now exposed in MacRuby via the Sandbox class, and can now be used to filter certain functionalities in the current process and therefore limit potential damage that can happen if a vulnerability is exploited. It is a good companion to the Ruby standard $SAFE functionality, also supported in MacRuby, because it can constrain access to all system services used by the process, including by C extensions or Cocoa APIs, not just from pure-Ruby APIs.
The "sandbox(7)":http://developer.apple.com/library/mac/#documentation/Darwin/Reference/ManPages/man7/sandbox.7.html facility is now exposed in MacRuby via the Sandbox class, and can now be used to restrict access to certain facilities in the current process and therefore limit potential damage that can happen if a vulnerability is exploited. It is a good companion to the Ruby standard $SAFE functionality, also supported in MacRuby, because it can constrain access to all system services used by the process, including by C extensions or Cocoa APIs, not just from pure-Ruby APIs.

<pre class="commands">
Sandbox.no_internet # TCP/IP networking is prohibited.
Expand All @@ -59,7 +59,7 @@ In this release we also reduced the memory and disk footprint of the runtime.

h3. Concurrency and Performance

The dispatcher has been rewritten to use a per-thread cache, which is a more efficient approach compared to the previous release. All reported deadlocks have been fixed. We have been successfully running Sinatra applications under the "ControlTower HTTP server":/blog/2010/09/20/announcing-control-tower.html in a concurrent fashion for the past weeks.
The dispatcher has been rewritten to use a per-thread cache, which is a more efficient approach compared to the previous release. All reported race conditions and deadlocks have been fixed. We have been successfully running Sinatra applications under the "ControlTower HTTP server":/blog/2010/09/20/announcing-control-tower.html in a concurrent fashion for the past weeks.

The MacRuby kernel, which contains the primitive functions called by the code generated by the compiler, is now pre-compiled into bitcode and included in the program's module. Further optimization passes can now be applied and result in a significant runtime performance improvement.

Expand Down

0 comments on commit f910bba

Please sign in to comment.