doc: note job escapability

MaulingMonkey · Sep 4, 2022 · 6f4ca46 · 6f4ca46
1 parent bd7a0e8
commit 6f4ca46
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 0 deletions.
diff --git a/examples/max_sandbox/job.rs b/examples/max_sandbox/job.rs
@@ -1,3 +1,9 @@
+//! Use job objects to somewhat limit what a process can do.
+//!
+//! Note that jobs aren't inescapeable:
+//! *   [project-zero: Blog: In-Console-Able (2015)](https://googleprojectzero.blogspot.com/2015/05/in-console-able.html)
+//! *   [project-zero: Issue 213: Windows: Console Driver Job Object Process Limit Bypass](https://bugs.chromium.org/p/project-zero/issues/detail?id=213&redir=1)
+
 pub use firehazard::job::*;
 use firehazard::*;
 

diff --git a/src/job/_job.rs b/src/job/_job.rs
@@ -1,5 +1,11 @@
 //! \[[docs.microsoft.com](https://docs.microsoft.com/en-us/windows/win32/procthread/job-objects)\]
 //! Job Object types and fns
+//!
+//! Note that jobs aren't inescapeable:
+//! *   [project-zero: Blog: In-Console-Able (2015)](https://googleprojectzero.blogspot.com/2015/05/in-console-able.html)
+//! *   [project-zero: Issue 213: Windows: Console Driver Job Object Process Limit Bypass](https://bugs.chromium.org/p/project-zero/issues/detail?id=213&redir=1)
+
+
 
 mod job_handles;                        pub use job_handles::*;
 mod job_information;                    pub use job_information::*;