Add comment to keep policy safe for UnrestrictedNetworking.

PiperOrigin-RevId: 630354112 Change-Id: Ic1146162d0eb75b6c66a14a956dea30d30e68475
google · May 3, 2024 · 9aa72d4 · 9aa72d4
1 parent b544015
commit 9aa72d4
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/sandboxed_api/sandbox.cc b/sandboxed_api/sandbox.cc
@@ -68,6 +68,9 @@ Sandbox::~Sandbox() {
 
 // A generic policy which should work with majority of typical libraries, which
 // are single-threaded and require ~30 basic syscalls.
+//
+// IMPORTANT: This policy must be safe to use with
+// `Allow(sandbox2::UnrestrictedNetworking())`.
 void InitDefaultPolicyBuilder(sandbox2::PolicyBuilder* builder) {
  (*builder)
  .AllowRead()