Ravi Sir's Cards › Chapter 55: Docker Security Best Practices, Image Scanning with Trivy, Logging, Monitoring and Docker Swarm Basics
What are Linux capabilities in Docker?
What are Linux capabilities in Docker? Root's powers split into pieces (NET_ADMIN, SYS_ADMIN...). Docker gives a default set; --cap-drop ALL and add back only what is needed.

Lesson: 55.1 Run containers as non-root and drop capabilities · मराठी card