diff --git a/sandboxed_api/sandbox2/docs/howitworks.md b/sandboxed_api/sandbox2/docs/howitworks.md index 1d9df32..e92d94e 100644 --- a/sandboxed_api/sandbox2/docs/howitworks.md +++ b/sandboxed_api/sandbox2/docs/howitworks.md @@ -47,7 +47,7 @@ can specify raw BPF macros, like in the [crc4](../examples/crc4/crc4sandbox.cc) example. Filesystem accesses are restricted with the help of Linux -[user namespaces][(http://man7.org/linux/man-pages/man7/user_namespaces.7.html). +[user namespaces](http://man7.org/linux/man-pages/man7/user_namespaces.7.html). User namespaces allow to drop the sandboxee into a custom chroot environment without requiring root privileges.