From 025bcdb6638f3b49ba4563c174578b68122ff276 Mon Sep 17 00:00:00 2001 From: Steven Wheelwright Date: Thu, 10 Feb 2022 19:50:00 +0000 Subject: [PATCH] typo: add missing ')' in doc --- g3doc/architecture_guide/resources.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/g3doc/architecture_guide/resources.md b/g3doc/architecture_guide/resources.md index fc997d40c..8f719fe83 100644 --- a/g3doc/architecture_guide/resources.md +++ b/g3doc/architecture_guide/resources.md @@ -41,7 +41,7 @@ descriptor to the Sentry via [SCM_RIGHTS][scmrights][^1]. These files may be read from and written to through standard system calls, and also mapped into the associated application's address space. This allows the same host memory to be shared across multiple sandboxes, although this mechanism -does not preclude the use of side-channels (see [Security Model](./security.md). +does not preclude the use of side-channels (see [Security Model](./security.md)). Note that some file systems exist only within the context of the sandbox. For example, in many cases a `tmpfs` mount will be available at `/tmp` or