Docker and CI/CD · Senior · Question 7 of 75

Why is `--privileged` dangerous?

1It makes the container run slower than usual
✓Correct answer: It gives the container nearly full access to the host
3It disables logging for the container

Explanation

All capabilities, all devices, no seccomp or AppArmor limits: escaping to the host becomes trivial. Grant specific capabilities or devices instead.

Further reading

Test yourself

Take the Docker and CI/CD · Senior quiz: questions and options are shuffled, and you get a review of your mistakes at the end.