summaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorIan Gudger <igudger@google.com>2019-04-02 10:49:24 -0700
committerAdin Scannell <adin@scannell.ca>2019-04-02 11:36:47 -0700
commitf419ffb46d34654e69e8dba3174bba3bc192f5c4 (patch)
tree28082bd524e7deeca06b7ee332a8f09e0ea9c2a8
parent0d1c1d94eec097edd8a53e44bff25e479f85bb10 (diff)
Add that veth is not required if networking is disabled.
-rw-r--r--content/docs/architecture_guide/security.md2
1 files changed, 1 insertions, 1 deletions
diff --git a/content/docs/architecture_guide/security.md b/content/docs/architecture_guide/security.md
index dfc7591ba..849c15744 100644
--- a/content/docs/architecture_guide/security.md
+++ b/content/docs/architecture_guide/security.md
@@ -138,7 +138,7 @@ We allow a sandbox to do the following.
files. The calls include duplication and closing of file descriptors,
synchronization, timers and signal management.
1. Read and write packets to a virtual ethernet device. This is not required if
- host networking is enabled.
+ host networking is enabled (or networking is disabled).
## Principles: Defense-in-Depth