diff options
| author | gVisor bot <gvisor-bot@google.com> | 2021-11-01 15:48:57 -0700 |
|---|---|---|
| committer | gVisor bot <gvisor-bot@google.com> | 2021-11-01 15:48:57 -0700 |
| commit | df6043afa02208bf9a6c2ac7986096869e9e2907 (patch) | |
| tree | 47740cdd1e8d61dc2a6b913e66de49f8dcccbcb0 /g3doc/README.md | |
| parent | b822923b706d6d2c5206451040f51a8c2f961353 (diff) | |
| parent | 40bf5aa790004178ad315328e4d75bf9af0a4451 (diff) | |
Merge pull request #6802 from ajilal95:patch-1
PiperOrigin-RevId: 406938082
Diffstat (limited to 'g3doc/README.md')
| -rw-r--r-- | g3doc/README.md | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/g3doc/README.md b/g3doc/README.md index dc4179037..5e23aa5ec 100644 --- a/g3doc/README.md +++ b/g3doc/README.md @@ -23,7 +23,7 @@ links below to see detailed instructions for each of them: gVisor provides a virtualized environment in order to sandbox containers. The system interfaces normally implemented by the host kernel are moved into a -distinct, per-sandbox application kernel in order to minimize the risk of an +distinct, per-sandbox application kernel in order to minimize the risk of a container escape exploit. gVisor does not introduce large fixed overheads however, and still retains a process-like model with respect to resource utilization. |