Update README

This commit is contained in:
0x1eef 2024-06-24 23:00:21 -03:00
parent 36994fe302
commit 614d9d5f07

View file

@ -58,9 +58,9 @@ Capsicum.in_capability_mode? # => false
## But How Can I Get Anything Done?
Open your files and sockets before entering the sandbox. If you have a
`TCPServer` open, for example, you can still call `#accept` on it, so a useful
server could conceivably run within it.
Open your files and sockets before the current process enters capability mode.
If you have a `TCPServer` open, for example, you can still call `#accept` on it,
so a useful server could conceivably run within it.
You *can* open new files, but this requires access to *at() syscalls. If Ruby
supported them, it might look something like this: