Merge pull request #6802 from ajilal95:patch-1

PiperOrigin-RevId: 406938082
This commit is contained in:
gVisor bot
2021-11-01 15:48:57 -07:00
+1 -1
View File
@@ -23,7 +23,7 @@ links below to see detailed instructions for each of them:
gVisor provides a virtualized environment in order to sandbox containers. The
system interfaces normally implemented by the host kernel are moved into a
distinct, per-sandbox application kernel in order to minimize the risk of an
distinct, per-sandbox application kernel in order to minimize the risk of a
container escape exploit. gVisor does not introduce large fixed overheads
however, and still retains a process-like model with respect to resource
utilization.