I&#x27;m not a docker user, but I think on binaries I can always use still capabilities, to limit what they can do.<p>I suppose most of them will be needed in this case, and it&#x27;s still a concern.<p>Just did want to remember to people about linux capabilities after read your comment:<p><pre><code>    man -k cap | grep capabilities</code></pre>