advancedTop 100 Interview Questions

Why should containers avoid running as root?

If an attacker exploits a vulnerability in the containerized application, running as root gives them root privileges within the container's namespace, which significantly raises the severity of any subsequent container-escape vulnerability versus the more limited blast radius of a non-root compromise.

Ready to master this question?

Generate a complete walkthrough — background, the full answer in plain language, a working code example explained line by line, a real-world scenario, common mistakes, and how this same question gets asked in different ways.

Sign in to generate a response

Next Step

Continue to What is userns-remap, and what does it protect against?← Back to all Docker questions