This repository was archived by the owner on Mar 28, 2018. It is now read-only.
This repository was archived by the owner on Mar 28, 2018. It is now read-only.
We may be able to drop cc-shim privileges to the user that has started the container #813
Description
It doesn't seem entirely trivial, but the shim doesn't have to run as root. In theory, it could drop privileges to the identity that has issued the docker run.