class

Smith::Sandbox::Strategy

Inherits Reference < Object

How a command is turned into a process. One implementation confines it, the other does not — and says so, rather than pretending.

Instance methods

active?

Source

describe

One line for smith sandbox and the startup banner.

Source

name

Source

sandboxed?(command : String) : Bool

Whether this command would actually be confined. False for everything when the strategy is off, and false for a command the user listed as unsandboxed.

Source

wrap(command : String) : Tuple(String, Array(String))

Program and arguments, kept apart. The command stays a single argv entry handed to bash -c, so nothing here can turn it into a second round of shell parsing.

Source