medium10 pts · first answer countscontainer-securitykubernetes

Running containers as non-root

A security review asks you to stop containers running as root. Which change is the most complete?

A.Set a non-root USER in the Dockerfile, plus runAsNonRoot: true and allowPrivilegeEscalation: false.B.Install sudo in the image and give the app user a sudoers rule, so it uses root only when needed.C.Run the container with privileged: true, so the app no longer needs to run as the root user.D.Switch to a full Ubuntu base image that ships with AppArmor and more security tools built in.

← Traces break between services Cloud key pushed to a public repo →