Add comment about snaspafe in SANDBOXING

aws · Sep 6, 2024 · de9f0ca · de9f0ca
1 parent 1e1657c
commit de9f0ca
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/SANDBOXING.md b/SANDBOXING.md
@@ -120,6 +120,11 @@ Once initialized, this mechanism does not require system calls in the steady
 state, though note the configured page will be inherited across privilege
 transitions.
 
+### Snapsafe protection
+
+Similar considerations to fork protection. The Snapsafe protection
+implementation maps a page that can trip sandboxes.
+
 ## C and C++ standard library
 
 BoringSSL depends on the C and C++ standard libraries which, themselves, do not