Document Sandbox.
This commit is contained in:
parent
7e7e4c179b
commit
70cfb52158
@ -3,8 +3,12 @@
|
|||||||
require "erb"
|
require "erb"
|
||||||
require "tempfile"
|
require "tempfile"
|
||||||
|
|
||||||
|
# Helper class for running a sub-process inside of a sandboxed environment.
|
||||||
|
#
|
||||||
|
# @api private
|
||||||
class Sandbox
|
class Sandbox
|
||||||
SANDBOX_EXEC = "/usr/bin/sandbox-exec"
|
SANDBOX_EXEC = "/usr/bin/sandbox-exec"
|
||||||
|
private_constant :SANDBOX_EXEC
|
||||||
|
|
||||||
def self.available?
|
def self.available?
|
||||||
OS.mac? && File.executable?(SANDBOX_EXEC)
|
OS.mac? && File.executable?(SANDBOX_EXEC)
|
||||||
@ -139,6 +143,7 @@ class Sandbox
|
|||||||
end
|
end
|
||||||
end
|
end
|
||||||
|
|
||||||
|
# Configuration profile for a sandbox.
|
||||||
class SandboxProfile
|
class SandboxProfile
|
||||||
SEATBELT_ERB = <<~ERB
|
SEATBELT_ERB = <<~ERB
|
||||||
(version 1)
|
(version 1)
|
||||||
@ -181,4 +186,5 @@ class Sandbox
|
|||||||
ERB.new(SEATBELT_ERB).result(binding)
|
ERB.new(SEATBELT_ERB).result(binding)
|
||||||
end
|
end
|
||||||
end
|
end
|
||||||
|
private_constant :SandboxProfile
|
||||||
end
|
end
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user