Simplifies privilege separation, and chroot in Crystal.
Add this to your application's shard.yml
:
dependencies:
restrict:
github: chris-huxtable/restrict.cr
require "restrict"
Restricting:
Process.restrict("/var/empty", "user", "group")
# restricted environment
or,
Process.restrict("/var/empty", "user", "group", wait: true) {
# restricted environment
}
# runs after block completes. `wait: false` will not wait until block completes.
- Fork it ( https://github.com/chris-huxtable/restict.cr/fork )
- Create your feature branch (git checkout -b my-new-feature)
- Commit your changes (git commit -am 'Add some feature')
- Push to the branch (git push origin my-new-feature)
- Create a new Pull Request
- Chris Huxtable - creator, maintainer