diff --git a/admin_guide/manage_scc.adoc b/admin_guide/manage_scc.adoc
index ddc9e7fe0c3c..d57211d3da2d 100644
--- a/admin_guide/manage_scc.adoc
+++ b/admin_guide/manage_scc.adoc
@@ -34,9 +34,9 @@ To get a current list of SCCs:
 ====
 ----
 $ oc get scc
-NAME         PRIV      CAPS      HOSTDIR   SELINUX     RUNASUSER
-privileged   true      []        true      RunAsAny    RunAsAny
-restricted   false     []        false     MustRunAs   MustRunAsRange
+NAME               PRIV      CAPS      HOSTDIR   EMPTYDIR   SELINUX     RUNASUSER          FSGROUP    SUPGROUP   PRIORITY
+privileged         true      []        true      true       RunAsAny    RunAsAny           RunAsAny   RunAsAny   <none>
+restricted         false     []        false     false      MustRunAs   MustRunAsRange     RunAsAny   RunAsAny   <none>
 ----
 ====
 
@@ -50,6 +50,7 @@ To examine a particular SCC, use `oc get`, `oc describe`, `oc export`, or `oc ed
 ----
 $ oc edit scc restricted
 allowHostDirVolumePlugin: false
+allowEmptyDirVolumePlugin: true
 allowHostNetwork: false
 allowHostPorts: false
 allowPrivilegedContainer: false
@@ -198,6 +199,7 @@ user:
 $ oc edit scc privileged
 
 allowHostDirVolumePlugin: true
+allowEmptyDirVolumePlugin: true
 allowPrivilegedContainer: true
 apiVersion: v1
 groups:
@@ -394,6 +396,20 @@ $ oc edit scc restricted
 
 . Save the changes.
 
+=== Block the emptyDir Volume Plug-in
+
+The use of `emptyDir` volumes is enabled by default, but can be disabled in your cluster if desired.
+
+. Edit the *restricted* SCC:
++
+----
+$ oc edit scc restricted
+----
+
+. Add `*allowEmptyDirVolumePlugin: false*`.
+
+. Save the changes.
+
 === Ensure That Admission Attempts to Use a Specific SCC First
 
 You may control the sort ordering of SCCs in admission by setting the `Priority`
diff --git a/architecture/additional_concepts/authorization.adoc b/architecture/additional_concepts/authorization.adoc
index a6bbd49f6bc5..c291c3a82a89 100644
--- a/architecture/additional_concepts/authorization.adoc
+++ b/architecture/additional_concepts/authorization.adoc
@@ -269,13 +269,13 @@ administrators using the CLI:
 ====
 ----
 $ oc get scc
-NAME               PRIV      CAPS      HOSTDIR   SELINUX     RUNASUSER          FSGROUP    SUPGROUP   PRIORITY
-anyuid             false     []        false     MustRunAs   RunAsAny           RunAsAny   RunAsAny   10
-hostaccess         false     []        true      MustRunAs   MustRunAsRange     RunAsAny   RunAsAny   <none>
-hostmount-anyuid   false     []        true      MustRunAs   RunAsAny           RunAsAny   RunAsAny   <none>
-nonroot            false     []        false     MustRunAs   MustRunAsNonRoot   RunAsAny   RunAsAny   <none>
-privileged         true      []        true      RunAsAny    RunAsAny           RunAsAny   RunAsAny   <none>
-restricted         false     []        false     MustRunAs   MustRunAsRange     RunAsAny   RunAsAny   <none>
+NAME               PRIV      CAPS      HOSTDIR   EMPTYDIR   SELINUX     RUNASUSER          FSGROUP    SUPGROUP   PRIORITY
+anyuid             false     []        false     true       MustRunAs   RunAsAny           RunAsAny   RunAsAny   10
+hostaccess         false     []        true      true       MustRunAs   MustRunAsRange     RunAsAny   RunAsAny   <none>
+hostmount-anyuid   false     []        true      true       MustRunAs   RunAsAny           RunAsAny   RunAsAny   <none>
+nonroot            false     []        false     true       MustRunAs   MustRunAsNonRoot   RunAsAny   RunAsAny   <none>
+privileged         true      []        true      true       RunAsAny    RunAsAny           RunAsAny   RunAsAny   <none>
+restricted         false     []        false     true       MustRunAs   MustRunAsRange     RunAsAny   RunAsAny   <none>
 ----
 ====
 
@@ -287,6 +287,7 @@ CLI. For example, for the privileged SCC:
 # oc export scc/privileged
 
 allowHostDirVolumePlugin: true
+allowEmptyDirVolumePlugin: true
 allowHostIPC: true
 allowHostNetwork: true
 allowHostPID: true
diff --git a/rest_api/kubernetes_v1.adoc b/rest_api/kubernetes_v1.adoc
index d95000c0efc6..edcf8207d17a 100644
--- a/rest_api/kubernetes_v1.adoc
+++ b/rest_api/kubernetes_v1.adoc
@@ -7959,6 +7959,7 @@ NamespaceList is a list of Namespaces.
 |allowPrivilegedContainer|allow containers to run as privileged|true|boolean|false
 |allowedCapabilities|capabilities that are allowed to be added|true|<<v1.Capability>> array|
 |allowHostDirVolumePlugin|allow the use of the host dir volume plugin|true|boolean|false
+|allowEmptyDirVolumePlugin|allow the use of the empty dir volume plugin|true|boolean|false
 |allowHostNetwork|allow the use of the hostNetwork in the pod spec|true|boolean|false
 |allowHostPorts|allow the use of the host ports in the containers|true|boolean|false
 |allowHostPID|allow the use of the host pid in the containers|true|boolean|false