diff options
author | Ian Gudger <igudger@google.com> | 2019-04-02 10:49:24 -0700 |
---|---|---|
committer | Adin Scannell <adin@scannell.ca> | 2019-04-02 11:36:47 -0700 |
commit | f419ffb46d34654e69e8dba3174bba3bc192f5c4 (patch) | |
tree | 28082bd524e7deeca06b7ee332a8f09e0ea9c2a8 | |
parent | 0d1c1d94eec097edd8a53e44bff25e479f85bb10 (diff) |
Add that veth is not required if networking is disabled.
-rw-r--r-- | content/docs/architecture_guide/security.md | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/content/docs/architecture_guide/security.md b/content/docs/architecture_guide/security.md index dfc7591ba..849c15744 100644 --- a/content/docs/architecture_guide/security.md +++ b/content/docs/architecture_guide/security.md @@ -138,7 +138,7 @@ We allow a sandbox to do the following. files. The calls include duplication and closing of file descriptors, synchronization, timers and signal management. 1. Read and write packets to a virtual ethernet device. This is not required if - host networking is enabled. + host networking is enabled (or networking is disabled). ## Principles: Defense-in-Depth |