skip to content
Alvin Lucillo

Docker security privileges

/ 1 min read

💻 Tech

With the following commands, we can grant or deny privileges to the default user of the container we spin up:

  • docker run --cap-add MAC_ADMIN ubuntu — adds a privilege on top of the existing privileges already provided to the default user
  • docker run --cap-drop KILL ubuntu — removes an existing privilege
  • docker run --privileged ubuntu — provide all privileges to the default user