netbird/gvisor
0
0
Fork 0
mirror of https://github.com/netbirdio/gvisor.git synced 2026-05-22 17:12:49 -07:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #7169 from sjwheel:patch-1

Browse Source 
PiperOrigin-RevId: 431788150
This commit is contained in:
gVisor bot
2022-03-01 15:19:58 -08:00
parent d79504d272 025bcdb663
commit 53385a9dc7
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
g3doc/architecture_guide/resources.md
+2 -1
View File
@@ -41,7 +41,8 @@ descriptor to the Sentry via [SCM_RIGHTS][scmrights][^1].
These files may be read from and written to through standard system calls, and
also mapped into the associated application's address space. This allows the
same host memory to be shared across multiple sandboxes, although this mechanism
does not preclude the use of side-channels (see [Security Model](./security.md).
does not preclude the use of side-channels (see
[Security Model](./security.md)).
Note that some file systems exist only within the context of the sandbox. For
example, in many cases a `tmpfs` mount will be available at `/tmp` or