Docker - Security
You want to run a container with minimal privileges but allow it to change the system clock. Which command achieves this?
You want to run a container with minimal privileges but allow it to change the system clock. Which command achieves this?
hard📝 Workflow Q9 of 15
Step-by-Step Solution
Solution:
Step 1: Understand minimal privileges with specific capability
Dropping all capabilities and adding only SYS_TIME limits privileges but allows changing system clock.Step 2: Compare other options
--privileged grants all capabilities, --cap-add SYS_TIME alone does not drop others, and --cap-drop SYS_TIME removes the needed capability.Final Answer:
docker run --cap-drop ALL --cap-add SYS_TIME myimage -> Option AQuick Check:
Drop all then add SYS_TIME for minimal clock change rights [OK]
Quick Trick: Drop all then add SYS_TIME for clock changes only [OK]
Common Mistakes:
- Using --privileged for minimal privileges
- Not dropping all capabilities first
- Removing SYS_TIME capability accidentally
Master "Security" in Docker
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore Docker Quizzes