Re:Curl to shell isn't so bad
by dickeytk on Sunday November 10, 2019 @12:47PM
(#21499117)
They do chroot. You can only install to specific directories
[ Parent
| on HN ]
Re:Curl to shell isn't so bad
by brianpgordon on Sunday November 10, 2019 @03:06PM
(#21499875)
Ah, I found it. On MacOS they rely on sandbox-exec which uses the sandboxing mechanism provided by the kernel:
https://github.com/Homebrew/brew/blob/e2c76cce8e01fd80e0910d...
https://github.com/Homebrew/brew/blob/master/Library/Homebre...