From 614d9d5f07c68a5f63c3c993a4422c50985f5998 Mon Sep 17 00:00:00 2001 From: 0x1eef <0x1eef@protonmail.com> Date: Mon, 24 Jun 2024 23:00:21 -0300 Subject: [PATCH] Update README --- README.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index 7d2b78f..3762a27 100644 --- a/README.md +++ b/README.md @@ -58,9 +58,9 @@ Capsicum.in_capability_mode? # => false ## But How Can I Get Anything Done? -Open your files and sockets before entering the sandbox. If you have a -`TCPServer` open, for example, you can still call `#accept` on it, so a useful -server could conceivably run within it. +Open your files and sockets before the current process enters capability mode. +If you have a `TCPServer` open, for example, you can still call `#accept` on it, +so a useful server could conceivably run within it. You *can* open new files, but this requires access to *at() syscalls. If Ruby supported them, it might look something like this: