Gecko [ fernandoquevedodop.com ]

Name	Size	Permission
examples	[ DIR ]	drwxr-xr-x
AUTHORS	1.89 KB	-rw-r--r--
NEWS.Debian.gz	1.11 KB	-rw-r--r--
NEWS.gz	57.68 KB	-rw-r--r--
README.md	2.34 KB	-rw-r--r--
TODO.gz	13.99 KB	-rw-r--r--
capsicum.txt	1.49 KB	-rw-r--r--
changelog.Debian.gz	1.24 KB	-rw-r--r--
copyright	1.68 KB	-rw-r--r--
design.html	5.32 KB	-rw-r--r--
design.txt.gz	1.89 KB	-rw-r--r--
faq.html	7.79 KB	-rw-r--r--
faq.txt.gz	2.8 KB	-rw-r--r--
formats.txt	3.42 KB	-rw-r--r--
manual.txt.gz	14.75 KB	-rw-r--r--
perl.txt.gz	11.43 KB	-rw-r--r--
signals.txt.gz	2.53 KB	-rw-r--r--
special_vars.txt.gz	2.43 KB	-rw-r--r--
startup-HOWTO.html	37.79 KB	-rw-r--r--
startup-HOWTO.txt.gz	10.89 KB	-rw-r--r--

Code Editor : capsicum.txt

Capsicum is a lightweight OS capability and sandbox framework provided
by FreeBSD.  When built with Capsicum support - which is the default under
FreeBSD - Irssi can enter a Capsicum capability mode (a sandbox), greatly
limiting possible consequences of a potential security hole in Irssi
or the libraries it depends on.

To make Irssi enter capability mode on startup, add

capsicum = "yes";
awaylog_file = "~/irclogs/away.log";

to your ~/.irssi/config and restart the client.  Alternatively you can
enter it "by hand", using the "/capsicum enter" command.  From the security
point of view it's strongly preferable to use the former method, to avoid
establishing connections without the sandbox protection; the "/capsicum"
command is only intended for experimentation, and in cases where you need
to do something that's not possible in capability mode - run scripts,
for example - before continuing.

There is no way to leave the capability mode, apart from exiting Irssi.
When running in capability mode, there are certain restrictions - Irssi
won't be able to access any files outside the directory pointed to by
capsicum_irclogs_path (which defaults to ~/irclogs/).  If you change
the path when already in capability mode it won't be effective until
you restart Irssi.  Capability mode also makes it impossible to use
the "/save" command.

Currently there is no way to use custom SSL certificates.  As a workaround
you can establish connections and enter the capability mode afterwards
using the "/capsicum enter" command.

${this.title}

Code Editor : capsicum.txt